Date: Mon, 13 Jan 2003 11:05:06 -0800 From: Maxime Henrion <mux@freebsd.org> To: Matthew Dillon <dillon@apollo.backplane.com> Cc: Pawel Jakub Dawidek <nick@garage.freebsd.pl>, Bruce Evans <bde@zeta.org.au>, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, luigi@FreeBSD.ORG Subject: Re: cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c Message-ID: <20030113190506.GF16775@elvis.mu.org> In-Reply-To: <200301131859.h0DIx2pa004540@apollo.backplane.com> References: <20030113082610.GH9430@garage.freebsd.pl> <20030113222917.C12128-100000@gamplex.bde.org> <20030113140700.GP9430@garage.freebsd.pl> <200301131859.h0DIx2pa004540@apollo.backplane.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Matthew Dillon wrote: > This seems like overkill to me. Why not simply implement > CTLFLAG_SECURE3 ? Also, the comment that Bruce quoted seems to > imply that MAC will eventually take over this functionality. I > suppose we could have a bandaid until then but if so I would > far prefer a CTLFLAG_SECURE3 bandaid then changing ip_fw_enable > into a SYSCTL_PROC. Implementing CTLFLAG_SECURE3 seems like the best thing to do to me as well, by far. Cheers, Maxime To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030113190506.GF16775>