Improvements to ipfw code (followup)

Alexey Dokuchaev danfe at
Sun Jul 3 00:05:25 GMT 2005

On Tue, Feb 19, 2002 at 11:40:03AM -0500, Robert Watson wrote:
> Just as a slight follow-up I should have included in my earlier e-mail:
> the merging of ucred and pcred should make this patch now be able to
> support real and saved uids/gids as well as effective uids/gids, meaning
> that it can be used to also restrict setuid applications such as ping.

Cool!  Right now I am cleaning up this 5-year old patch to catch up with
current IPFW code, fixing possible bugs, and separating optimizations
and features stuff for easier reviewing and testing.  I like the idea of
supporting real and saved uids/gids as well as effective ones, I think
I will include this functionality as soon as I get the whole thing working
with current -CURRENT.

Alexey Dokuchaev

To Unsubscribe: send mail to majordomo at
with "unsubscribe freebsd-arch" in the body of the message

More information about the freebsd-ipfw mailing list