From owner-cvs-src-old@FreeBSD.ORG Sun Oct 26 22:46:00 2008 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EDBB71065672 for ; Sun, 26 Oct 2008 22:46:00 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id D96C08FC17 for ; Sun, 26 Oct 2008 22:46:00 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id m9QMk0eo069970 for ; Sun, 26 Oct 2008 22:46:00 GMT (envelope-from rwatson@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id m9QMk0BT069969 for cvs-src-old@freebsd.org; Sun, 26 Oct 2008 22:46:00 GMT (envelope-from rwatson@repoman.freebsd.org) Message-Id: <200810262246.m9QMk0BT069969@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to rwatson@repoman.freebsd.org using -f From: Robert Watson Date: Sun, 26 Oct 2008 22:45:18 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/netinet6 frag6.c ip6_var.h src/sys/security/mac mac_framework.h mac_inet6.c mac_policy.h X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Oct 2008 22:46:01 -0000 rwatson 2008-10-26 22:45:18 UTC FreeBSD src repository Modified files: sys/netinet6 frag6.c ip6_var.h sys/security/mac mac_framework.h mac_inet6.c mac_policy.h Log: SVN rev 184307 on 2008-10-26 22:45:18Z by rwatson Add a MAC label, MAC Framework, and MAC policy entry points for IPv6 fragment reassembly queues. This allows policies to label reassembly queues, perform access control checks when matching fragments to a queue, update a queue label when fragments are matched, and label the resulting reassembled datagram. Obtained from: TrustedBSD Project Revision Changes Path 1.39 +30 -2 src/sys/netinet6/frag6.c 1.45 +1 -0 src/sys/netinet6/ip6_var.h 1.103 +9 -1 src/sys/security/mac/mac_framework.h 1.2 +99 -1 src/sys/security/mac/mac_inet6.c 1.113 +21 -1 src/sys/security/mac/mac_policy.h