cvs commit: src/sys/security/mac_portacl mac_portacl.c

[Robert Watson]

rwatson     2004-12-22 09:39:08 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_5)
    sys/security/mac_portacl mac_portacl.c 
  Log:
  Merge mac_portacl.c:1.7 from HEAD to RELENG_5:
  
    date: 2004/12/08 11:46:44;  author: rwatson;  state: Exp;  lines: +23 -0
    Add a new sysctl/tunable to mac_portacl:
  
        security.mac.portacl.autoport_exempt
  
    This sysctl exempts to bind port '0' as long as IP_PORTRANGELOW hasn't
    been set on the socket.  This is quite useful as it allows applications
    to use automatic binding without adding overly broad rules for the
    binding of port 0.  This sysctl defaults to enabled.
  
    This is a slight variation on the patch submitted by the contributor.
  
    MFC after:      2 weeks
    Submitted by:   Michal Mertl <mime at traveller dot cz>
  
  Revision  Changes    Path
  1.5.2.2   +23 -0     src/sys/security/mac_portacl/mac_portacl.c