From owner-cvs-all@FreeBSD.ORG  Fri Dec 29 13:59:03 2006
Return-Path: <owner-cvs-all@FreeBSD.ORG>
X-Original-To: cvs-all@FreeBSD.org
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 9383816A492;
	Fri, 29 Dec 2006 13:59:03 +0000 (UTC)
	(envelope-from mlaier@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [69.147.83.41])
	by mx1.freebsd.org (Postfix) with ESMTP id 6BF3013C455;
	Fri, 29 Dec 2006 13:59:03 +0000 (UTC)
	(envelope-from mlaier@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id kBTDx3A0039588;
	Fri, 29 Dec 2006 13:59:03 GMT
	(envelope-from mlaier@repoman.freebsd.org)
Received: (from mlaier@localhost)
	by repoman.freebsd.org (8.13.6/8.13.4/Submit) id kBTDx3Gd039587;
	Fri, 29 Dec 2006 13:59:03 GMT (envelope-from mlaier)
Message-Id: <200612291359.kBTDx3Gd039587@repoman.freebsd.org>
From: Max Laier <mlaier@FreeBSD.org>
Date: Fri, 29 Dec 2006 13:59:03 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/conf NOTES options src/sys/contrib/pf/net pf.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Dec 2006 13:59:03 -0000

mlaier      2006-12-29 13:59:03 UTC

  FreeBSD src repository

  Modified files:
    sys/conf             NOTES options 
    sys/contrib/pf/net   pf.c 
  Log:
  Work around a long standing LOR with user/group rules by doing the socket
  lookup early.  This has some performance implications and should not be
  enabled by default, but might help greatly in certain setups.  After some
  more testing this could be turned into a sysctl.
  
  Tested by:      avatar
  LOR ids:        17, 24, 32, 46, 191 (conceptual)
  MFC after:      6 weeks
  
  Revision  Changes    Path
  1.1404    +4 -0      src/sys/conf/NOTES
  1.570     +1 -0      src/sys/conf/options
  1.43      +12 -0     src/sys/contrib/pf/net/pf.c