cvs commit: src/sys/kern kern_jail.c src/sys/netinet ip_options.c src/sys/netinet6 in6.c ip6_output.c ip6_var.h raw_ip6.c udp6_usrreq.c src/sys/sys priv.h

[Bjoern A. Zeeb]

bz          2008-01-24 08:25:59 UTC

  FreeBSD src repository

  Modified files:
    sys/kern             kern_jail.c 
    sys/netinet          ip_options.c 
    sys/netinet6         in6.c ip6_output.c ip6_var.h raw_ip6.c 
                         udp6_usrreq.c 
    sys/sys              priv.h 
  Log:
  Replace the last susers calls in netinet6/ with privilege checks.
  
  Introduce a new privilege allowing to set certain IP header options
  (hop-by-hop, routing headers).
  
  Leave a few comments to be addressed later.
  
  Reviewed by:    rwatson (older version, before addressing his comments)
  
  Revision  Changes    Path
  1.75      +6 -0      src/sys/kern/kern_jail.c
  1.8       +1 -0      src/sys/netinet/ip_options.c
  1.78      +10 -10    src/sys/netinet6/in6.c
  1.113     +75 -44    src/sys/netinet6/ip6_output.c
  1.41      +1 -1      src/sys/netinet6/ip6_var.h
  1.76      +4 -7      src/sys/netinet6/raw_ip6.c
  1.85      +1 -6      src/sys/netinet6/udp6_usrreq.c
  1.18      +1 -0      src/sys/sys/priv.h