From owner-cvs-all@FreeBSD.ORG  Sun Feb  4 20:28:15 2007
Return-Path: <owner-cvs-all@FreeBSD.ORG>
X-Original-To: cvs-all@FreeBSD.org
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 29E2716A400;
	Sun,  4 Feb 2007 20:28:15 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from cyrus.watson.org (cyrus.watson.org [209.31.154.42])
	by mx1.freebsd.org (Postfix) with ESMTP id B609713C428;
	Sun,  4 Feb 2007 20:28:14 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from fledge.watson.org (fledge.watson.org [209.31.154.41])
	by cyrus.watson.org (Postfix) with ESMTP id 670B146DA1;
	Sun,  4 Feb 2007 15:28:13 -0500 (EST)
Date: Sun, 4 Feb 2007 20:28:12 +0000 (GMT)
From: Robert Watson <rwatson@FreeBSD.org>
X-X-Sender: robert@fledge.watson.org
To: Bruce M Simpson <bms@FreeBSD.org>
In-Reply-To: <200702041632.l14GWlwX033519@repoman.freebsd.org>
Message-ID: <20070204202722.K91177@fledge.watson.org>
References: <200702041632.l14GWlwX033519@repoman.freebsd.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/sys/net if_tap.c if_tun.c src/share/man/man4
 tap.4         tun.4
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 04 Feb 2007 20:28:15 -0000


On Sun, 4 Feb 2007, Bruce M Simpson wrote:

> bms         2007-02-04 16:32:46 UTC
>
>  FreeBSD src repository
>
>  Modified files:
>    sys/net              if_tap.c if_tun.c
>    share/man/man4       tap.4 tun.4
>  Log:
>  Implement ifnet cloning for tun(4)/tap(4).
>  Make devfs cloning a sysctl/tunable which defaults to on.
>
>  If devfs cloning is enabled, only the super-user may create
>  tun(4)/tap(4)/vmnet(4) instances. Devfs cloning is still enabled by

Perhaps the tapclone privilege check should also check tapuopen, as the open 
check does?

Robert N M Watson
Computer Laboratory
University of Cambridge