Date: Fri, 9 Jan 2009 21:57:49 +0000 (UTC) From: "Bjoern A. Zeeb" <bz@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/net rtsock.c src/sys/netinet in.c src/sys/netinet6 in6.c Message-ID: <200901092158.n09Lwq8m025573@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
bz 2009-01-09 21:57:49 UTC
FreeBSD src repository
Modified files:
sys/net rtsock.c
sys/netinet in.c
sys/netinet6 in6.c
Log:
SVN rev 186980 on 2009-01-09 21:57:49Z by bz
Restrict arp, ndp and theoretically the FIB listing (if not
read with libkvm) to the addresses of a prison, when inside a
jail. [1]
As the patch from the PR was pre-'new-arp', add checks to the
llt_dump handlers as well.
While touching RTM_GET in route_output(), consistently use
curthread credentials rather than the creds from the socket
there. [2]
PR: kern/68189
Submitted by: Mark Delany <sxcg2-fuwxj@qmda.emu.st> [1]
Discussed with: rwatson [2]
Reviewed by: rwatson
MFC after: 4 weeks
Revision Changes Path
1.161 +12 -2 src/sys/net/rtsock.c
1.118 +4 -0 src/sys/netinet/in.c
1.96 +4 -0 src/sys/netinet6/in6.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200901092158.n09Lwq8m025573>