bz cfb85f0c07 Rather than passing around a cached 'priv', pass in an ucred to ...

ipsec*_set_policy and do the privilege check only if needed.

Try to assimilate both ip*_ctloutput code blocks calling ipsec*_set_policy.

Reviewed by:	rwatson

2008-02-02 14:11:31 +00:00

..

libalias

Simpler version of the previous commit.

2007-12-06 09:31:13 +00:00

accf_data.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

accf_http.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

icmp6.h

…

icmp_var.h

Attempt to improve feature parity between UDPv4 and UDPv6 by merging

2007-07-19 22:34:25 +00:00

if_atm.c

…

if_atm.h

…

if_ether.c

Don't duplicate the whole of arpresolve to arpresolve 2 for the sake

2007-12-31 23:48:06 +00:00

if_ether.h

Don't duplicate the whole of arpresolve to arpresolve 2 for the sake

2007-12-31 23:48:06 +00:00

igmp_var.h

…

igmp.c

Move towards more explicit support for various network protocol stacks

2007-10-28 15:55:23 +00:00

igmp.h

…

in_cksum.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

in_gif.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

in_gif.h

…

in_mcast.c

Over the past couple of years, there have been a number of reports relating

2007-08-06 22:06:36 +00:00

in_pcb.c

When IPSEC fails to allocate policy state for an inpcb, and MAC is in use,

2007-12-22 10:06:11 +00:00

in_pcb.h

Add padding for anticipated functionality

2007-12-07 01:46:13 +00:00

in_proto.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

in_rmx.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

in_systm.h

…

in_var.h

…

in.c

Differentiate between addifaddr and delifaddr for the privilege check.

2008-01-24 08:14:38 +00:00

in.h

…

ip6.h

…

ip_carp.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

ip_carp.h

…

ip_divert.c

Merge first in a series of TrustedBSD MAC Framework KPI changes

2007-10-24 19:04:04 +00:00

ip_divert.h

…

ip_dummynet.c

Workaround p->numbytes overflow, which can result in infinite loop inside

2007-12-25 09:36:51 +00:00

ip_dummynet.h

1) dummynet_io() declaration has changed.

2007-11-06 23:01:42 +00:00

ip_ecn.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

ip_ecn.h

…

ip_encap.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

ip_encap.h

…

ip_fastfwd.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

ip_fw2.c

Hide ipfw internal data structures behind IPFW_INTERNAL rather than

2008-01-25 14:38:27 +00:00

ip_fw_pfil.c

1) dummynet_io() declaration has changed.

2007-11-06 23:01:42 +00:00

ip_fw.h

Hide ipfw internal data structures behind IPFW_INTERNAL rather than

2008-01-25 14:38:27 +00:00

ip_gre.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

ip_gre.h

…

ip_icmp.c

Continue to move from generic network entry points in the TrustedBSD MAC

2007-10-28 17:12:48 +00:00

ip_icmp.h

…

ip_id.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

ip_input.c

Consider the following situation:

2007-12-02 13:00:47 +00:00

ip_ipsec.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

ip_ipsec.h

Rename option IPSEC_FILTERGIF to IPSEC_FILTERTUNNEL.

2007-08-05 16:16:15 +00:00

ip_mroute.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

ip_mroute.h

…

ip_options.c

Replace the last susers calls in netinet6/ with privilege checks.

2008-01-24 08:25:59 +00:00

ip_options.h

…

ip_output.c

Rather than passing around a cached 'priv', pass in an ucred to

2008-02-02 14:11:31 +00:00

ip_var.h

…

ip.h

Remove IPTOS_CE and IPTOS_ECT constants. They were defined in RFC 2481

2007-10-19 12:46:15 +00:00

ipprotosw.h

…

pim_var.h

…

pim.h

…

raw_ip.c

Merge first in a series of TrustedBSD MAC Framework KPI changes

2007-10-24 19:04:04 +00:00

sctp_asconf.c

- Bug fix managing congestion parameter on immediate

2007-10-01 03:22:29 +00:00

sctp_asconf.h

- Get rid of unsused constants for sysctl variables.

2007-09-15 19:07:42 +00:00

sctp_auth.c

- Fix a bug where the socket may have been closed which

2008-01-28 10:31:12 +00:00

sctp_auth.h

…

sctp_bsd_addr.c

- Change back to using prioity 0. Which means don't change the

2008-01-28 10:33:41 +00:00

sctp_bsd_addr.h

…

sctp_cc_functions.c

- Locking compatiability changes. This involves adding

2007-09-08 11:35:11 +00:00

sctp_cc_functions.h

- Added some comments to tell where the htcp

2007-09-10 17:06:25 +00:00

sctp_constants.h

- Change the Time Wait of vtags value to match the cookie-life

2007-10-30 14:09:24 +00:00

sctp_crc32.c

…

sctp_crc32.h

…

sctp_header.h

- Fix address add handling to clear cached routes and source addresses

2007-08-24 00:53:53 +00:00

sctp_indata.c

- Fixes a comparison wrap issue with sack gap ack blocks that

2008-01-28 10:25:43 +00:00

sctp_indata.h

…

sctp_input.c

Correct two problems relating to sorflush(), which is called to flush

2008-01-31 08:22:24 +00:00

sctp_input.h

- Consolidate the code that free's chunks to actually also

2007-07-02 19:22:22 +00:00

sctp_lock_bsd.h

- The address lock is changed to a rwlock. This

2007-09-18 15:16:39 +00:00

sctp_os_bsd.h

- The address lock is changed to a rwlock. This

2007-09-18 15:16:39 +00:00

sctp_os.h

- Fix address add handling to clear cached routes and source addresses

2007-08-24 00:53:53 +00:00

sctp_output.c

- More fixes for lock misses on the transfer of data to

2007-12-07 01:32:14 +00:00

sctp_output.h

- Bug fix managing congestion parameter on immediate

2007-10-01 03:22:29 +00:00

sctp_pcb.c

- Fix a comment about prison.

2008-01-28 10:34:38 +00:00

sctp_pcb.h

- Change the Time Wait of vtags value to match the cookie-life

2007-10-30 14:09:24 +00:00

sctp_peeloff.c

Correct two problems relating to sorflush(), which is called to flush

2008-01-31 08:22:24 +00:00

sctp_peeloff.h

…

sctp_structs.h

- Found a problem in non-blocking sends. When

2007-12-04 14:41:48 +00:00

sctp_sysctl.c

- DF bit was on for COOKIE-ECHO chunks. This is

2007-09-13 14:43:54 +00:00

sctp_sysctl.h

- Get rid of unsused constants for sysctl variables.

2007-09-15 19:07:42 +00:00

sctp_timer.c

- fix sctp_ifn initial refcount issue (prevents deletion)

2007-10-16 14:05:51 +00:00

sctp_timer.h

- Incorrect error EAGAIN returned for invalid send on a locked

2007-09-13 10:36:43 +00:00

sctp_uio.h

- The address lock is changed to a rwlock. This

2007-09-18 15:16:39 +00:00

sctp_usrreq.c

- More fixes for lock misses on the transfer of data to

2007-12-07 01:32:14 +00:00

sctp_var.h

- fix sctp_ifn initial refcount issue (prevents deletion)

2007-10-16 14:05:51 +00:00

sctp.h

- Found a problem in non-blocking sends. When

2007-12-04 14:41:48 +00:00

sctputil.c

Correct two problems relating to sorflush(), which is called to flush

2008-01-31 08:22:24 +00:00

sctputil.h

- Change the Time Wait of vtags value to match the cookie-life

2007-10-30 14:09:24 +00:00

tcp_debug.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

tcp_debug.h

…

tcp_fsm.h

Make tcpstates[] static, and make sure TCPSTATES is defined before

2007-07-30 11:06:42 +00:00

tcp_hostcache.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

tcp_input.c

Merge first in a series of TrustedBSD MAC Framework KPI changes

2007-10-24 19:04:04 +00:00

tcp_offload.c

Remove extraneous debug statements.

2007-12-19 05:17:40 +00:00

tcp_offload.h

Incorporate TCP offload hooks in to core TCP code.

2007-12-18 22:59:07 +00:00

tcp_output.c

Centralize and correct computation of TCP-MD5 signature offset within

2007-11-30 23:46:51 +00:00

tcp_reass.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

tcp_sack.c

…

tcp_seq.h

…

tcp_subr.c

Incorporate TCP offload hooks in to core TCP code.

2007-12-18 22:59:07 +00:00

tcp_syncache.c

Fix bugs in the TCP syncache timeout code. including:

2007-12-19 16:56:28 +00:00

tcp_syncache.h

Add interface for tcp offload to syncache:

2007-12-12 20:35:59 +00:00

tcp_timer.c

Add FBSDID to all files in netinet so that people can more

2007-10-07 20:44:24 +00:00

tcp_timer.h

Two changes:

2007-09-24 05:26:24 +00:00

tcp_timewait.c

Merge first in a series of TrustedBSD MAC Framework KPI changes

2007-10-24 19:04:04 +00:00

tcp_usrreq.c

tcp_usrreq.c:1.313 removed tcbinfo locking from tcp_usr_accept(), which

2008-01-23 21:15:51 +00:00

tcp_var.h

Fix style issues with initial TCP offload commit

2007-12-12 23:31:49 +00:00

tcp.h

Add socket option for setting and retrieving the congestion control algorithm.

2007-12-16 03:30:07 +00:00

tcpip.h

…

toedev.h

Update the toedev's connect interface to reflect the fact that the inpcb

2007-12-16 05:30:21 +00:00

udp_usrreq.c

Merge first in a series of TrustedBSD MAC Framework KPI changes

2007-10-24 19:04:04 +00:00

udp_var.h

Further cleanup of UDPv4:

2007-07-10 09:30:46 +00:00

udp.h

…