From owner-cvs-all@FreeBSD.ORG  Wed Jul  2 17:28:50 2008
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 872971065684;
	Wed,  2 Jul 2008 17:28:50 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 73EF78FC16;
	Wed,  2 Jul 2008 17:28:50 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id m62HSokt073631;
	Wed, 2 Jul 2008 17:28:50 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from svn2cvs@localhost)
	by repoman.freebsd.org (8.14.1/8.14.1/Submit) id m62HSo3u073630;
	Wed, 2 Jul 2008 17:28:50 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Message-Id: <200807021728.m62HSo3u073630@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to
	rwatson@repoman.freebsd.org using -f
From: Robert Watson <rwatson@FreeBSD.org>
Date: Wed, 2 Jul 2008 17:28:41 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: RELENG_7
Cc: 
Subject: cvs commit: src/sys/netinet ip_dummynet.c raw_ip.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Jul 2008 17:28:50 -0000

rwatson     2008-07-02 17:28:41 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_7)
    sys/netinet          ip_dummynet.c raw_ip.c 
  Log:
  SVN rev 180191 on 2008-07-02 17:28:41Z by rwatson
  
  Merge ip_dummynet.c:1.116, raw_ip.c:1.185 (r179201) from head to
  stable/7:
  
    Consistently check IPFW and DUMMYNET privileges in the configuration
    routines for those modules, rather than in the raw socket code.  This
    each privilege check to occur in exactly once place and avoids
    duplicate checks across layers.
  
    Sponsored by:   nCircle Network Security, Inc.
  
  Revision   Changes    Path
  1.110.2.3  +5 -0      src/sys/netinet/ip_dummynet.c
  1.180.2.1  +0 -19     src/sys/netinet/raw_ip.c