Bruce M Simpson cd83bbd2aa Implement ifnet cloning for tun(4)/tap(4). ...

Make devfs cloning a sysctl/tunable which defaults to on.

If devfs cloning is enabled, only the super-user may create
tun(4)/tap(4)/vmnet(4) instances. Devfs cloning is still enabled by
default; it may be disabled from the loader or via sysctl with
"net.link.tap.devfs_cloning" and "net.link.tun.devfs_cloning".

Disabling its use affects potentially all tun(4)/tap(4) consumers
including OpenSSH, OpenVPN and VMware.

PR:		105228 (potentially also 90413, 105570)
Submitted by:	Landon Fuller
Tested by:	Andrej Tobola
Approved by:	core (rwatson)
MFC after:	4 weeks

2007-02-04 16:32:46 +00:00

..

bpf_filter.c

Avoid unwanted sign extension of indexed byte load in bpf code.

2006-05-28 20:00:02 +00:00

bpf_jitter.c

Add BPF Just-In-Time compiler support for ng_bpf(4).

2005-12-07 21:30:47 +00:00

bpf_jitter.h

Add BPF Just-In-Time compiler support for ng_bpf(4).

2005-12-07 21:30:47 +00:00

bpf.c

Remove slightly dubious comment; add descriptive strings for several

2007-01-28 16:38:44 +00:00

bpf.h

more juniper dlt's

2006-09-04 19:24:34 +00:00

bpfdesc.h

Update comment for struct bpf_d: we now store buffered packets for BPF

2007-01-29 14:41:03 +00:00

bridgestp.c

Set topology change propagation on all ports _except_ the caller.

2007-01-18 07:13:01 +00:00

bridgestp.h

These days P2P means peer-2-peer (also well known from serveral filesharing

2006-12-11 23:46:40 +00:00

bsd_comp.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

ethernet.h

style(9) nit. Prefer struct[space]name[space]{ to make grep searches more

2007-01-01 21:49:39 +00:00

fddi.h

- Make IFP2ENADDR() a pointer to IF_LLADDR() rather than another

2005-11-11 07:36:14 +00:00

firewire.h

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

if_arc.h

Use ANSI C function protypes and declarations for if_arcsubr.

2006-04-12 07:44:31 +00:00

if_arcsubr.c

Use ANSI C function protypes and declarations for if_arcsubr.

2006-04-12 07:44:31 +00:00

if_arp.h

- Store pointer to the link-level address right in "struct ifnet"

2005-11-11 16:04:59 +00:00

if_atm.h

Propagate rename of IFF_OACTIVE and IFF_RUNNING to IFF_DRV_OACTIVE and

2005-08-09 10:20:02 +00:00

if_atmsubr.c

Remove obfuscating OpenBSD/NetBSD/BSDI/FreeBSD 2.x/FreeBSD 5.x ifdefs

2006-12-01 22:45:43 +00:00

if_bridge.c

These days P2P means peer-2-peer (also well known from serveral filesharing

2006-12-11 23:46:40 +00:00

if_bridgevar.h

These days P2P means peer-2-peer (also well known from serveral filesharing

2006-12-11 23:46:40 +00:00

if_clone.c

Revise network interface cloning to take an optional opaque

2006-07-09 06:04:01 +00:00

if_clone.h

Revise network interface cloning to take an optional opaque

2006-07-09 06:04:01 +00:00

if_disc.c

Revise network interface cloning to take an optional opaque

2006-07-09 06:04:01 +00:00

if_dl.h

…

if_ef.c

Return mbuf pointer or NULL from ip_fastforward() as the mbuf pointer

2006-01-18 14:24:39 +00:00

if_enc.c

Various bpf(4) related fixes to catch places up to the new bpf(4)

2006-12-29 13:59:50 +00:00

if_ethersubr.c

Note that rev. 1.221 introduced a local workaround for a general problem.

2006-12-24 08:52:13 +00:00

if_faith.c

With exception of the if_name() macro, all definitions in net_osdep.h

2006-08-04 21:27:40 +00:00

if_fddisubr.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

if_fwsubr.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

if_gif.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

if_gif.h

Add some initial locking to gif(4). It doesn't covers the whole driver,

2006-01-30 08:39:09 +00:00

if_gre.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

if_gre.h

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

if_iso88025subr.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

if_llc.h

Move the __packed declarations. This makes sizeof(struct llc) 8 again

2006-12-01 17:50:11 +00:00

if_loop.c

fixed a bug that local IPv6 traffic (to an address configured on an

2006-09-22 01:31:22 +00:00

if_media.c

- Introduce ifmedia_baudrate(), which returns correct baudrate of the

2006-02-14 12:10:03 +00:00

if_media.h

First cut at half/quarter-rate 11a channel support (e.g. for use

2006-12-27 18:46:18 +00:00

if_mib.c

Add a new leaf to the net.link.generic.ifdata.%d sysctl to retrieve

2006-01-04 12:57:09 +00:00

if_mib.h

Add a new leaf to the net.link.generic.ifdata.%d sysctl to retrieve

2006-01-04 12:57:09 +00:00

if_ppp.c

Use callout mechanism instead of timeout()/untimeout().

2006-12-05 18:54:21 +00:00

if_ppp.h

…

if_pppvar.h

Use callout mechanism instead of timeout()/untimeout().

2006-12-05 18:54:21 +00:00

if_sl.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

if_slvar.h

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

if_sppp.h

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

if_spppfr.c

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

if_spppsubr.c

MFp4: 92972, 98913 + one more change

2006-12-12 12:17:58 +00:00

if_stf.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

if_stf.h

…

if_tap.c

Implement ifnet cloning for tun(4)/tap(4).

2007-02-04 16:32:46 +00:00

if_tap.h

Fix our ioctl(2) implementation when the argument is "int". New

2006-09-27 19:57:02 +00:00

if_tapvar.h

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

if_tun.c

Implement ifnet cloning for tun(4)/tap(4).

2007-02-04 16:32:46 +00:00

if_tun.h

…

if_types.h

Add a pseudo interface for packet filtering IPSec connections before or after

2006-06-26 22:30:08 +00:00

if_var.h

Improve description of if_capabilities, if_capenable and ifi_hwassist.

2006-09-06 18:06:04 +00:00

if_vlan_var.h

Move ethernet VLAN tags from mtags to its own mbuf packet header field

2006-09-17 13:33:30 +00:00

if_vlan.c

- Don't defer the removal of an 802.1q header for no real reason.

2006-12-30 21:10:25 +00:00

if.c

The recent issues with em(4) interface has shown that the old 4.4BSD

2006-11-30 15:02:01 +00:00

if.h

First step of TSO (TCP segmentation offload) support in our network stack.

2006-09-06 21:51:59 +00:00

iso88025.h

- Make IFP2ENADDR() a pointer to IF_LLADDR() rather than another

2005-11-11 07:36:14 +00:00

netisr.c

Change net.isr.direct from defaulting to 0 to 1 in 7-CURRENT. This

2006-11-28 11:19:36 +00:00

netisr.h

…

pfil.c

Somewhat re-factor the read/write locking mechanism associated with the packet

2006-02-02 03:13:16 +00:00

pfil.h

define lock.h before rwlock.h for DEBUG_LOCKS

2006-02-02 20:33:10 +00:00

pfkeyv2.h

…

ppp_comp.h

…

ppp_deflate.c

This patch fixes a problem, which exists if you have IPSEC in your kernel

2006-02-27 16:56:22 +00:00

ppp_defs.h

…

ppp_tty.c

Use callout mechanism instead of timeout()/untimeout().

2006-12-05 18:54:21 +00:00

radix.c

The code in rn_walktree_from() that checks if we backed up too far

2006-02-07 20:25:39 +00:00

radix.h

…

raw_cb.c

raw_disconnect() now disconnects but does not detach the raw pcb. As a

2006-06-02 08:27:15 +00:00

raw_cb.h

…

raw_usrreq.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

route.c

Initialize a local variable in 2 places just before it is used, not always

2006-11-23 05:57:15 +00:00

route.h

- Fill in the correct rtm_index for RTM_ADD and RTM_CHANGE messages.

2006-03-15 19:39:09 +00:00

rtsock.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

slcompress.c

…

slcompress.h

…

slip.h

…

zlib.c

Forward declare z_errmsg with static linkage since it is defined

2005-09-11 16:13:02 +00:00

zlib.h

…