cvs commit: src/sys/contrib/pf/net pf.c src/sys/modules/ipfw Makefile src/sys/modules/pf Makefile src/sys/netinet ip_fw2.c src/sys/security/mac mac_inet.c src/sys/security/mac_biba mac_biba.c src/sys/security/mac_lomac mac_lomac.c ...

[Christian S.J. Peron]

csjp        2006-09-19 15:45:22 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_6)
    sys/contrib/pf/net   pf.c 
    sys/modules/ipfw     Makefile 
    sys/modules/pf       Makefile 
    sys/netinet          ip_fw2.c 
    sys/security/mac     mac_inet.c 
    sys/security/mac_biba mac_biba.c 
    sys/security/mac_lomac mac_lomac.c 
    sys/security/mac_mls mac_mls.c 
    sys/sys              mac.h mac_policy.h 
  Log:
  MFC the firewall labeling changes.
  
  This fixes kernel panics which occur when the firewall sends out a packet.
  This can happen for keep alives, or instances when the firewall is
  configured to return RST or ICMP unreach packets. These panics occured
  only if MLS, BIBA or LOMAC security policies were loaded.
  
  Approved by:    re@ (kensmith)
  Submitted by:   mlaier (with changes)
  
  Revision    Changes    Path
  1.34.2.4    +56 -1     src/sys/contrib/pf/net/pf.c
  1.21.2.2    +1 -1      src/sys/modules/ipfw/Makefile
  1.7.2.3     +1 -1      src/sys/modules/pf/Makefile
  1.106.2.19  +20 -5     src/sys/netinet/ip_fw2.c
  1.1.8.1     +10 -0     src/sys/security/mac/mac_inet.c
  1.87.2.6    +12 -0     src/sys/security/mac_biba/mac_biba.c
  1.35.2.4    +12 -0     src/sys/security/mac_lomac/mac_lomac.c
  1.72.2.5    +12 -0     src/sys/security/mac_mls/mac_mls.c
  1.67.2.4    +1 -0      src/sys/sys/mac.h
  1.66.2.5    +2 -1      src/sys/sys/mac_policy.h