Date: Sat, 10 Jan 2009 23:50:23 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/net if_loop.c Message-ID: <200901102350.n0ANoWkl060247@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2009-01-10 23:50:23 UTC
FreeBSD src repository
Modified files:
sys/net if_loop.c
Log:
SVN rev 187039 on 2009-01-10 23:50:23Z by rwatson
Do invoke mac_ifnet_check_transmit() and mac_ifnet_create_mbuf()
in the loopback and synthetic loopback code so that packets are
access control checked and relabeled. Previously, the MAC
Framework enforced that packets sent over the loopback weren't
relabeled, but this will allow policies to make explicit choices
about how and whether to relabel packets on the loopback. Also,
for SIMPLEX devices, this produces more consistent behavior for
looped back packets to the local MAC address by labeling those
packets as coming from the interface.
Discussed with: csjp
Obtained from: TrustedBSD Project
Revision Changes Path
1.124 +18 -0 src/sys/net/if_loop.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200901102350.n0ANoWkl060247>