cjc dd7bfe512b Lock the sysctl(8) knobs that turn ip{,6}fw(8) firewalling and ...

firewall logging on and off when at elevated securelevel(8). It would
be nice to be able to only lock these at securelevel >= 3, like rules
are, but there is no such functionality at present. I don't see reason
to be adding features to securelevel(8) with MAC being merged into 5.0.

PR:		kern/39396
Reviewed by:	luigi
MFC after:	1 week

2002-08-25 03:50:29 +00:00

..

libalias

Don't forget to recalculate the IP checksum of the original

2002-07-23 00:16:19 +00:00

accf_data.c

Remove so*_locked(), which were backed out by mistake.

2002-06-18 07:42:02 +00:00

accf_http.c

Remove so*_locked(), which were backed out by mistake.

2002-06-18 07:42:02 +00:00

icmp6.h

Revised MLD-related definitions

2002-05-06 16:28:25 +00:00

icmp_var.h

…

if_atm.c

- Change the newly turned INVARIANTS #ifdef blocks (they were changed from

2002-05-21 18:52:24 +00:00

if_atm.h

…

if_ether.c

Introduce support for Mandatory Access Control and extensible

2002-07-31 16:45:16 +00:00

if_ether.h

Fixed some style bugs in the removal of __P(()). Continuation lines

2002-03-24 10:19:10 +00:00

igmp_var.h

…

igmp.c

Introduce support for Mandatory Access Control and extensible

2002-07-31 16:46:56 +00:00

igmp.h

…

in_cksum.c

…

in_gif.c

just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD.

2002-04-19 04:46:24 +00:00

in_gif.h

…

in_pcb.c

Create new functions in_sockaddr(), in6_sockaddr(), and

2002-08-21 11:57:12 +00:00

in_pcb.h

Create new functions in_sockaddr(), in6_sockaddr(), and

2002-08-21 11:57:12 +00:00

in_proto.c

…

in_rmx.c

…

in_systm.h

…

in_var.h

Fixed some style bugs in the removal of __P(()). Continuation lines

2002-03-24 10:19:10 +00:00

in.c

Lock up inpcb.

2002-06-10 20:05:46 +00:00

in.h

o Merge <machine/ansi.h> and <machine/types.h> into a new header

2002-08-21 16:20:02 +00:00

ip6.h

…

ip_divert.c

Introduce support for Mandatory Access Control and extensible

2002-07-31 16:42:47 +00:00

ip_dummynet.c

Kernel support for a dummynet option:

2002-08-15 16:53:43 +00:00

ip_dummynet.h

Kernel support for a dummynet option:

2002-08-15 16:53:43 +00:00

ip_ecn.c

initialize local variable explicitly

2002-04-11 02:14:21 +00:00

ip_ecn.h

…

ip_encap.c

just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD.

2002-04-19 04:46:24 +00:00

ip_encap.h

…

ip_flow.c

…

ip_flow.h

…

ip_fw2.c

Lock the sysctl(8) knobs that turn ip{,6}fw(8) firewalling and

2002-08-25 03:50:29 +00:00

ip_fw.c

Remove (almost all) global variables that were used to hold

2002-06-22 11:51:02 +00:00

ip_fw.h

One bugfix and one new feature.

2002-08-10 04:37:32 +00:00

ip_icmp.c

Introduce support for Mandatory Access Control and extensible

2002-08-01 03:53:04 +00:00

ip_icmp.h

…

ip_id.c

…

ip_input.c

Fix handling of packets which matched an "ipfw fwd" rule on the input side.

2002-08-03 14:59:45 +00:00

ip_mroute.c

Just a comment on some additional consistency checks that could

2002-06-26 21:00:53 +00:00

ip_mroute.h

…

ip_output.c

Introduce support for Mandatory Access Control and extensible

2002-07-31 17:21:01 +00:00

ip_var.h

Perform a nested include of _label.h if #ifdef _KERNEL. This will

2002-08-15 14:34:02 +00:00

ip.h

…

ipprotosw.h

…

raw_ip.c

Rename mac_check_socket_receive() to mac_check_socket_deliver() so that

2002-08-15 18:51:27 +00:00

tcp_debug.c

It's now sufficient to rely on a nested include of _label.h to make sure

2002-08-15 14:34:45 +00:00

tcp_debug.h

make the strings for tcptimers, tanames and prurequests const to silence

2002-08-16 09:07:59 +00:00

tcp_fsm.h

…

tcp_input.c

Enclose IPv6 addresses in brackets when they are displayed printable with a

2002-08-19 19:47:13 +00:00

tcp_output.c

Implement TCP bandwidth delay product window limiting, similar to (but

2002-08-17 18:26:02 +00:00

tcp_reass.c

Enclose IPv6 addresses in brackets when they are displayed printable with a

2002-08-19 19:47:13 +00:00

tcp_seq.h

…

tcp_subr.c

Correct bug in t_bw_rtttime rollover, #undef USERTT

2002-08-24 17:22:44 +00:00

tcp_syncache.c

Handle PMTU discovery in syn-ack packets slightly differently;

2002-08-05 22:34:15 +00:00

tcp_timer.c

Fix overflows in intermediate calculations in sysctl_msec_to_ticks().

2002-07-20 23:48:59 +00:00

tcp_timer.h

make the strings for tcptimers, tanames and prurequests const to silence

2002-08-16 09:07:59 +00:00

tcp_timewait.c

Correct bug in t_bw_rtttime rollover, #undef USERTT

2002-08-24 17:22:44 +00:00

tcp_usrreq.c

Replace (ab)uses of "NULL" where "0" is really meant.

2002-08-22 21:24:01 +00:00

tcp_var.h

Implement TCP bandwidth delay product window limiting, similar to (but

2002-08-17 18:26:02 +00:00

tcp.h

…

tcpip.h

…

udp_usrreq.c

Code formatting sync to trustedbsd_mac: don't perform an assignment

2002-08-15 22:04:31 +00:00

udp_var.h

Notify functions can destroy the pcb, so they have to return an

2002-06-14 08:35:21 +00:00

udp.h

…