From owner-cvs-src@FreeBSD.ORG  Tue Sep 19 15:45:43 2006
Return-Path: <owner-cvs-src@FreeBSD.ORG>
X-Original-To: cvs-src@FreeBSD.org
Delivered-To: cvs-src@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EB0DC16A521;
	Tue, 19 Sep 2006 15:45:43 +0000 (UTC)
	(envelope-from csjp@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E2D2243DAC;
	Tue, 19 Sep 2006 15:45:25 +0000 (GMT)
	(envelope-from csjp@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id k8JFjNiw068333;
	Tue, 19 Sep 2006 15:45:23 GMT
	(envelope-from csjp@repoman.freebsd.org)
Received: (from csjp@localhost)
	by repoman.freebsd.org (8.13.6/8.13.4/Submit) id k8JFjMjj068332;
	Tue, 19 Sep 2006 15:45:22 GMT (envelope-from csjp)
Message-Id: <200609191545.k8JFjMjj068332@repoman.freebsd.org>
From: "Christian S.J. Peron" <csjp@FreeBSD.org>
Date: Tue, 19 Sep 2006 15:45:22 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: RELENG_6
Cc: 
Subject: cvs commit: src/sys/contrib/pf/net pf.c src/sys/modules/ipfw
 Makefile src/sys/modules/pf Makefile src/sys/netinet ip_fw2.c
 src/sys/security/mac mac_inet.c src/sys/security/mac_biba
 mac_biba.c src/sys/security/mac_lomac mac_lomac.c ...
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Sep 2006 15:45:44 -0000

csjp        2006-09-19 15:45:22 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_6)
    sys/contrib/pf/net   pf.c 
    sys/modules/ipfw     Makefile 
    sys/modules/pf       Makefile 
    sys/netinet          ip_fw2.c 
    sys/security/mac     mac_inet.c 
    sys/security/mac_biba mac_biba.c 
    sys/security/mac_lomac mac_lomac.c 
    sys/security/mac_mls mac_mls.c 
    sys/sys              mac.h mac_policy.h 
  Log:
  MFC the firewall labeling changes.
  
  This fixes kernel panics which occur when the firewall sends out a packet.
  This can happen for keep alives, or instances when the firewall is
  configured to return RST or ICMP unreach packets. These panics occured
  only if MLS, BIBA or LOMAC security policies were loaded.
  
  Approved by:    re@ (kensmith)
  Submitted by:   mlaier (with changes)
  
  Revision    Changes    Path
  1.34.2.4    +56 -1     src/sys/contrib/pf/net/pf.c
  1.21.2.2    +1 -1      src/sys/modules/ipfw/Makefile
  1.7.2.3     +1 -1      src/sys/modules/pf/Makefile
  1.106.2.19  +20 -5     src/sys/netinet/ip_fw2.c
  1.1.8.1     +10 -0     src/sys/security/mac/mac_inet.c
  1.87.2.6    +12 -0     src/sys/security/mac_biba/mac_biba.c
  1.35.2.4    +12 -0     src/sys/security/mac_lomac/mac_lomac.c
  1.72.2.5    +12 -0     src/sys/security/mac_mls/mac_mls.c
  1.67.2.4    +1 -0      src/sys/sys/mac.h
  1.66.2.5    +2 -1      src/sys/sys/mac_policy.h