Date: Tue, 19 Sep 2006 15:45:22 +0000 (UTC) From: "Christian S.J. Peron" <csjp@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/contrib/pf/net pf.c src/sys/modules/ipfw Makefile src/sys/modules/pf Makefile src/sys/netinet ip_fw2.c src/sys/security/mac mac_inet.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_lomac mac_lomac.c ... Message-ID: <200609191545.k8JFjMjj068332@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
csjp 2006-09-19 15:45:22 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_6)
sys/contrib/pf/net pf.c
sys/modules/ipfw Makefile
sys/modules/pf Makefile
sys/netinet ip_fw2.c
sys/security/mac mac_inet.c
sys/security/mac_biba mac_biba.c
sys/security/mac_lomac mac_lomac.c
sys/security/mac_mls mac_mls.c
sys/sys mac.h mac_policy.h
Log:
MFC the firewall labeling changes.
This fixes kernel panics which occur when the firewall sends out a packet.
This can happen for keep alives, or instances when the firewall is
configured to return RST or ICMP unreach packets. These panics occured
only if MLS, BIBA or LOMAC security policies were loaded.
Approved by: re@ (kensmith)
Submitted by: mlaier (with changes)
Revision Changes Path
1.34.2.4 +56 -1 src/sys/contrib/pf/net/pf.c
1.21.2.2 +1 -1 src/sys/modules/ipfw/Makefile
1.7.2.3 +1 -1 src/sys/modules/pf/Makefile
1.106.2.19 +20 -5 src/sys/netinet/ip_fw2.c
1.1.8.1 +10 -0 src/sys/security/mac/mac_inet.c
1.87.2.6 +12 -0 src/sys/security/mac_biba/mac_biba.c
1.35.2.4 +12 -0 src/sys/security/mac_lomac/mac_lomac.c
1.72.2.5 +12 -0 src/sys/security/mac_mls/mac_mls.c
1.67.2.4 +1 -0 src/sys/sys/mac.h
1.66.2.5 +2 -1 src/sys/sys/mac_policy.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200609191545.k8JFjMjj068332>