From owner-cvs-src@FreeBSD.ORG  Fri Jul 18 09:10:37 2003
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id BA73337B401; Fri, 18 Jul 2003 09:10:37 -0700 (PDT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 5436043F93; Fri, 18 Jul 2003 09:10:37 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h6IGAb0U027717;
	Fri, 18 Jul 2003 09:10:37 -0700 (PDT)
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h6IGAbrv027716;
	Fri, 18 Jul 2003 09:10:37 -0700 (PDT)
Message-Id: <200307181610.h6IGAbrv027716@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Fri, 18 Jul 2003 09:10:37 -0700 (PDT)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/netinet raw_ip.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Jul 2003 16:10:38 -0000

rwatson     2003/07/18 09:10:37 PDT

  FreeBSD src repository

  Modified files:
    sys/netinet          raw_ip.c 
  Log:
  Add a comment above rip_ctloutput() documenting that the privilege
  check for raw IP system management operations is often (although
  not always) implicit due to the namespacing of raw IP sockets.  I.e.,
  you have to have privilege to get a raw IP socket, so much of the
  management code sitting on raw IP sockets assumes that any requests
  on the socket should be granted privilege.
  
  Obtained from:  TrustedBSD Project
  Product of:     France
  
  Revision  Changes    Path
  1.112     +10 -0     src/sys/netinet/raw_ip.c