From owner-cvs-src@FreeBSD.ORG  Thu May 22 08:10:32 2008
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 583BE1065674;
	Thu, 22 May 2008 08:10:32 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 2EB598FC20;
	Thu, 22 May 2008 08:10:32 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id m4M8AWxA090113;
	Thu, 22 May 2008 08:10:32 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.14.1/8.14.1/Submit) id m4M8AVjV090112;
	Thu, 22 May 2008 08:10:31 GMT (envelope-from rwatson)
Message-Id: <200805220810.m4M8AVjV090112@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Thu, 22 May 2008 08:10:31 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/netinet ip_dummynet.c raw_ip.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 22 May 2008 08:10:32 -0000

rwatson     2008-05-22 08:10:31 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          ip_dummynet.c raw_ip.c 
  Log:
  Consistently check IPFW and DUMMYNET privileges in the configuration
  routines for those modules, rather than in the raw socket code.  This
  each privilege check to occur in exactly once place and avoids
  duplicate checks across layers.
  
  MFC after:      3 weeks
  Sponsored by:   nCircle Network Security, Inc.
  
  Revision  Changes    Path
  1.116     +5 -0      src/sys/netinet/ip_dummynet.c
  1.185     +0 -19     src/sys/netinet/raw_ip.c