bz ffd2421407 Restrict arp, ndp and theoretically the FIB listing (if not
read with libkvm) to the addresses of a prison, when inside a
jail. [1]
As the patch from the PR was pre-'new-arp', add checks to the
llt_dump handlers as well.

While touching RTM_GET in route_output(), consistently use
curthread credentials rather than the creds from the socket
there. [2]

PR:		kern/68189
Submitted by:	Mark Delany <sxcg2-fuwxj@qmda.emu.st> [1]
Discussed with:	rwatson [2]
Reviewed by:	rwatson
MFC after:	4 weeks
2009-01-09 21:57:49 +00:00
..
2008-07-25 23:58:09 +00:00
2008-08-25 20:43:13 +00:00
2007-12-09 20:47:12 +00:00
2008-03-17 01:26:44 +00:00
2007-10-12 03:03:16 +00:00
2008-12-16 04:41:39 +00:00
2008-12-17 08:12:50 +00:00
2007-02-28 22:05:30 +00:00