cvs commit: src/sys/kern kern_jail.c src/sys/netinet ip_options.c src/sys/netinet6 in6.c ip6_output.c ip6_var.h raw_ip6.c udp6_usrreq.c

[Bjoern A. Zeeb]

bz          2008-03-09 19:01:51 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_7)
    sys/kern             kern_jail.c 
    sys/netinet          ip_options.c 
    sys/netinet6         in6.c ip6_output.c ip6_var.h raw_ip6.c 
                         udp6_usrreq.c 
  Log:
  MFC:
    1.75  sys/kern/kern_jail.c
    1.8   sys/netinet/ip_options.c
    1.78  sys/netinet6/in6.c
    1.113 sys/netinet6/ip6_output.c
    1.41  sys/netinet6/ip6_var.h
    1.76  sys/netinet6/raw_ip6.c
    1.85  sys/netinet6/udp6_usrreq.c
    [ previously MFCed by rwatson 1.18 sys/sys/priv.h belonging to this change ]
  
    Replace the last susers calls in netinet6/ with privilege checks.
  
    Introduce a new privilege allowing to set certain IP header options
    (hop-by-hop, routing headers).
  
    Leave a few comments that we would like to address later.
  
  Discussed with: rwatson
  
  Revision   Changes    Path
  1.70.2.1   +6 -0      src/sys/kern/kern_jail.c
  1.6.2.1    +1 -0      src/sys/netinet/ip_options.c
  1.73.2.1   +10 -10    src/sys/netinet6/in6.c
  1.109.2.2  +75 -44    src/sys/netinet6/ip6_output.c
  1.39.2.1   +1 -1      src/sys/netinet6/ip6_var.h
  1.73.2.1   +4 -7      src/sys/netinet6/raw_ip6.c
  1.81.2.1   +1 -6      src/sys/netinet6/udp6_usrreq.c