Date: Thu, 22 May 2008 07:18:54 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/kern uipc_syscalls.c Message-ID: <200805220718.m4M7IsGX086821@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2008-05-22 07:18:54 UTC
FreeBSD src repository
Modified files:
sys/kern uipc_syscalls.c
Log:
When sendto(2) is called with an explicit destination address
argument, call mac_socket_check_connect() on that address before
proceeding with the send. Otherwise policies instrumenting the
connect entry point for the purposes of checking destination
addresses will not have the opportunity to check implicit
connect requests.
MFC after: 3 weeks
Sponsored by: nCircle Network Security, Inc.
Revision Changes Path
1.272 +5 -1 src/sys/kern/uipc_syscalls.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200805220718.m4M7IsGX086821>