From owner-cvs-src@FreeBSD.ORG  Thu May 22 07:18:54 2008
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C68061065680;
	Thu, 22 May 2008 07:18:54 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 9E5A38FC1E;
	Thu, 22 May 2008 07:18:54 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id m4M7Is6i086822;
	Thu, 22 May 2008 07:18:54 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.14.1/8.14.1/Submit) id m4M7IsGX086821;
	Thu, 22 May 2008 07:18:54 GMT (envelope-from rwatson)
Message-Id: <200805220718.m4M7IsGX086821@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Thu, 22 May 2008 07:18:54 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/kern uipc_syscalls.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 22 May 2008 07:18:54 -0000

rwatson     2008-05-22 07:18:54 UTC

  FreeBSD src repository

  Modified files:
    sys/kern             uipc_syscalls.c 
  Log:
  When sendto(2) is called with an explicit destination address
  argument, call mac_socket_check_connect() on that address before
  proceeding with the send.  Otherwise policies instrumenting the
  connect entry point for the purposes of checking destination
  addresses will not have the opportunity to check implicit
  connect requests.
  
  MFC after:      3 weeks
  Sponsored by:   nCircle Network Security, Inc.
  
  Revision  Changes    Path
  1.272     +5 -1      src/sys/kern/uipc_syscalls.c