cvs commit: src/sys/security/mac_portacl mac_portacl.c

[Robert Watson]

rwatson     2004-12-08 11:46:44 UTC

  FreeBSD src repository

  Modified files:
    sys/security/mac_portacl mac_portacl.c 
  Log:
  Add a new sysctl/tunable to mac_portacl:
  
      security.mac.portacl.autoport_exempt
  
  This sysctl exempts to bind port '0' as long as IP_PORTRANGELOW hasn't
  been set on the socket.  This is quite useful as it allows applications
  to use automatic binding without adding overly broad rules for the
  binding of port 0.  This sysctl defaults to enabled.
  
  This is a slight variation on the patch submitted by the contributor.
  
  MFC after:      2 weeks
  Submitted by:   Michal Mertl <mime at traveller dot cz>
  
  Revision  Changes    Path
  1.7       +23 -0     src/sys/security/mac_portacl/mac_portacl.c