rwatson afe2b1f929 Merge from TrustedBSD MAC branch: ...

Move the network code from using cr_cansee() to check whether a
    socket is visible to a requesting credential to using a new
    function, cr_canseesocket(), which accepts a subject credential
    and object socket.  Implement cr_canseesocket() so that it does a
    prison check, a uid check, and add a comment where shortly a MAC
    hook will go.  This will allow MAC policies to seperately
    instrument the visibility of sockets from the visibility of
    processes.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs

2002-03-22 19:57:41 +00:00

..

libalias

Fixed the bug in transparent TCP proxying with the "encode_ip_hdr"

2001-12-18 16:13:45 +00:00

accf_data.c

Remove headers not needed.

2000-10-07 23:15:17 +00:00

accf_http.c

Fix incorrect logic wouldn't disconnect incomming connections that had been

2001-01-03 19:50:23 +00:00

icmp6.h

Remove __P.

2002-03-19 21:25:46 +00:00

icmp_var.h

Remove __P.

2002-03-19 21:25:46 +00:00

if_atm.c

Pull post-4.4BSD change to sys/net/route.c from BSD/OS 4.2.

2001-10-17 18:07:05 +00:00

if_atm.h

Remove __P.

2002-03-19 21:25:46 +00:00

if_ether.c

Send periodic ARP requests when ARP entries for hosts we are sending

2002-03-20 15:56:36 +00:00

if_ether.h

Remove __P.

2002-03-19 21:25:46 +00:00

if_fddi.h

Remove __P.

2002-03-19 21:25:46 +00:00

igmp_var.h

Remove __P.

2002-03-19 21:25:46 +00:00

igmp.c

Remove __P.

2002-03-19 21:25:46 +00:00

igmp.h

…

in_cksum.c

…

in_gif.c

Staticize an extern that no one else used.

2002-02-26 18:24:00 +00:00

in_gif.h

Remove __P.

2002-03-19 21:25:46 +00:00

in_pcb.c

Change the ephemeral port range from 1024-5000 to 49152-65535.

2002-03-22 03:28:11 +00:00

in_pcb.h

Switch vm_zone.h with uma.h. Change over to uma interfaces.

2002-03-20 05:48:55 +00:00

in_proto.c

Remove __P.

2002-03-19 21:25:46 +00:00

in_rmx.c

Remove __P.

2002-03-19 21:25:46 +00:00

in_systm.h

Remove __P.

2002-03-19 21:25:46 +00:00

in_var.h

Remove __P.

2002-03-19 21:25:46 +00:00

in.c

Remove __P.

2002-03-19 21:25:46 +00:00

in.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip6.h

Sync with recent KAME.

2001-06-11 12:39:29 +00:00

ip_divert.c

Switch vm_zone.h with uma.h. Change over to uma interfaces.

2002-03-20 05:48:55 +00:00

ip_dummynet.c

Simple p_ucred -> td_ucred changes to start using the per-thread ucred

2002-02-27 18:32:23 +00:00

ip_dummynet.h

MFS: sync the ipfw/dummynet/bridge code with the one recently merged

2001-11-04 22:56:25 +00:00

ip_ecn.c

Sync with recent KAME.

2001-06-11 12:39:29 +00:00

ip_ecn.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip_encap.c

Remove __P.

2002-03-19 21:25:46 +00:00

ip_encap.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip_flow.c

s/FREE/free/

2001-11-04 17:35:31 +00:00

ip_flow.h

Back out the previous change to the queue(3) interface.

2000-05-26 02:09:24 +00:00

ip_fw.c

Simple p_ucred -> td_ucred changes to start using the per-thread ucred

2002-02-27 18:32:23 +00:00

ip_fw.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip_icmp.c

Prevent icmp_reflect() from calling ip_output() with a NULL route

2002-03-22 16:45:54 +00:00

ip_icmp.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip_id.c

Remove __P.

2002-03-19 21:25:46 +00:00

ip_input.c

Remove __P.

2002-03-19 21:25:46 +00:00

ip_mroute.c

Prevent icmp_reflect() from calling ip_output() with a NULL route

2002-03-22 16:45:54 +00:00

ip_mroute.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip_output.c

Prevent icmp_reflect() from calling ip_output() with a NULL route

2002-03-22 16:45:54 +00:00

ip_var.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip.h

o Add IPOPT_ESO for the 'Extended Security' IP option (RFC1108)

2001-12-14 19:37:32 +00:00

ipprotosw.h

KSE Milestone 2

2001-09-12 08:38:13 +00:00

raw_ip.c

Merge from TrustedBSD MAC branch:

2002-03-22 19:57:41 +00:00

tcp_debug.c

Remove a change that snuck in from my private tree.

2001-12-21 05:07:39 +00:00

tcp_debug.h

Sorry in this just befor code freeze commit.

2000-01-29 11:49:07 +00:00

tcp_fsm.h

WARNS=n and lint(1) silencer. Declare an array of (const) strings

2002-02-03 11:57:32 +00:00

tcp_input.c

Remove __P.

2002-03-19 21:25:46 +00:00

tcp_output.c

Reduce the local network slowstart flightsize from infinity to 4 packets.

2001-12-14 18:26:52 +00:00

tcp_reass.c

Remove __P.

2002-03-19 21:25:46 +00:00

tcp_seq.h

Move initialization of snd_recover into tcp_sendseqinit().

2001-11-21 18:45:51 +00:00

tcp_subr.c

Merge from TrustedBSD MAC branch:

2002-03-22 19:57:41 +00:00

tcp_syncache.c

Switch vm_zone.h with uma.h. Change over to uma interfaces.

2002-03-20 05:48:55 +00:00

tcp_timer.c

o Our currenty userland boot code (due to rc.conf and rc.network) always

2001-12-07 17:01:28 +00:00

tcp_timer.h

Remove __P.

2002-03-19 21:25:46 +00:00

tcp_timewait.c

Merge from TrustedBSD MAC branch:

2002-03-22 19:57:41 +00:00

tcp_usrreq.c

Remove __P.

2002-03-19 21:25:46 +00:00

tcp_var.h

Remove __P.

2002-03-19 21:25:46 +00:00

tcp.h

o Minor style(9)ism to make consistent with -STABLE

2001-01-09 18:26:17 +00:00

tcpip.h

Remove struct full_tcpiphdr{}.

2001-02-26 20:10:16 +00:00

udp_usrreq.c

Merge from TrustedBSD MAC branch:

2002-03-22 19:57:41 +00:00

udp_var.h

Remove __P.

2002-03-19 21:25:46 +00:00

udp.h

…