csjp 2006-09-19 15:45:22 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_6)
sys/contrib/pf/net pf.c
sys/modules/ipfw Makefile
sys/modules/pf Makefile
sys/netinet ip_fw2.c
sys/security/mac mac_inet.c
sys/security/mac_biba mac_biba.c
sys/security/mac_lomac mac_lomac.c
sys/security/mac_mls mac_mls.c
sys/sys mac.h mac_policy.h
Log:
MFC the firewall labeling changes.
This fixes kernel panics which occur when the firewall sends out a packet.
This can happen for keep alives, or instances when the firewall is
configured to return RST or ICMP unreach packets. These panics occured
only if MLS, BIBA or LOMAC security policies were loaded.
Approved by: re@ (kensmith)
Submitted by: mlaier (with changes)
Revision Changes Path
1.34.2.4 +56 -1 src/sys/contrib/pf/net/pf.c
1.21.2.2 +1 -1 src/sys/modules/ipfw/Makefile
1.7.2.3 +1 -1 src/sys/modules/pf/Makefile
1.106.2.19 +20 -5 src/sys/netinet/ip_fw2.c
1.1.8.1 +10 -0 src/sys/security/mac/mac_inet.c
1.87.2.6 +12 -0 src/sys/security/mac_biba/mac_biba.c
1.35.2.4 +12 -0 src/sys/security/mac_lomac/mac_lomac.c
1.72.2.5 +12 -0 src/sys/security/mac_mls/mac_mls.c
1.67.2.4 +1 -0 src/sys/sys/mac.h
1.66.2.5 +2 -1 src/sys/sys/mac_policy.h
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
