Date: Thu, 21 Aug 2003 11:39:16 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netinet ip_icmp.c tcp_subr.c Message-ID: <200308211839.h7LIdG3M015181@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2003/08/21 11:39:16 PDT
FreeBSD src repository
Modified files:
sys/netinet ip_icmp.c tcp_subr.c
Log:
Introduce two new MAC Framework and MAC policy entry points:
mac_reflect_mbuf_icmp()
mac_reflect_mbuf_tcp()
These entry points permit MAC policies to do "update in place"
changes to the labels on ICMP and TCP mbuf headers when an ICMP or
TCP response is generated to a packet outside of the context of
an existing socket. For example, in respond to a ping or a RST
packet to a SYN on a closed port.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Revision Changes Path
1.79 +3 -0 src/sys/netinet/ip_icmp.c
1.161 +3 -3 src/sys/netinet/tcp_subr.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200308211839.h7LIdG3M015181>