Date: Thu, 21 Aug 2003 11:21:22 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/kern kern_mac.c src/sys/sys mac.h mac_policy.h Message-ID: <200308211821.h7LILMpQ014529@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2003/08/21 11:21:22 PDT
FreeBSD src repository
Modified files:
sys/kern kern_mac.c
sys/sys mac.h mac_policy.h
Log:
Introduce two new MAC Framework and MAC policy entry points:
mac_reflect_mbuf_icmp()
mac_reflect_mbuf_tcp()
These entry points permit MAC policies to do "update in place"
changes to the labels on ICMP and TCP mbuf headers when an ICMP or
TCP response is generated to a packet outside of the context of
an existing socket. For example, in respond to a ping or a RST
packet to a SYN on a closed port.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Revision Changes Path
1.97 +19 -0 src/sys/kern/kern_mac.c
1.42 +2 -0 src/sys/sys/mac.h
1.43 +3 -0 src/sys/sys/mac_policy.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200308211821.h7LILMpQ014529>