Date: Wed, 22 Dec 2004 09:39:08 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/security/mac_portacl mac_portacl.c Message-ID: <200412220939.iBM9d8FB032113@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2004-12-22 09:39:08 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_5)
sys/security/mac_portacl mac_portacl.c
Log:
Merge mac_portacl.c:1.7 from HEAD to RELENG_5:
date: 2004/12/08 11:46:44; author: rwatson; state: Exp; lines: +23 -0
Add a new sysctl/tunable to mac_portacl:
security.mac.portacl.autoport_exempt
This sysctl exempts to bind port '0' as long as IP_PORTRANGELOW hasn't
been set on the socket. This is quite useful as it allows applications
to use automatic binding without adding overly broad rules for the
binding of port 0. This sysctl defaults to enabled.
This is a slight variation on the patch submitted by the contributor.
MFC after: 2 weeks
Submitted by: Michal Mertl <mime at traveller dot cz>
Revision Changes Path
1.5.2.2 +23 -0 src/sys/security/mac_portacl/mac_portacl.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200412220939.iBM9d8FB032113>
