Date: Sat, 2 Feb 2008 14:11:31 +0000 (UTC) From: "Bjoern A. Zeeb" <bz@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netinet ip_output.c src/sys/netinet6 ip6_output.c src/sys/netipsec ipsec.c ipsec.h ipsec6.h Message-ID: <200802021411.m12EBVuF024183@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
bz 2008-02-02 14:11:31 UTC
FreeBSD src repository
Modified files:
sys/netinet ip_output.c
sys/netinet6 ip6_output.c
sys/netipsec ipsec.c ipsec.h ipsec6.h
Log:
Rather than passing around a cached 'priv', pass in an ucred to
ipsec*_set_policy and do the privilege check only if needed.
Try to assimilate both ip*_ctloutput code blocks calling ipsec*_set_policy.
Reviewed by: rwatson
Revision Changes Path
1.278 +5 -20 src/sys/netinet/ip_output.c
1.114 +9 -26 src/sys/netinet6/ip6_output.c
1.26 +14 -11 src/sys/netipsec/ipsec.c
1.15 +1 -1 src/sys/netipsec/ipsec.h
1.4 +1 -1 src/sys/netipsec/ipsec6.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200802021411.m12EBVuF024183>