]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Introduce support for Mandatory Access Control and extensible
authorrwatson <rwatson@FreeBSD.org>
Thu, 1 Aug 2002 03:53:04 +0000 (03:53 +0000)
committerrwatson <rwatson@FreeBSD.org>
Thu, 1 Aug 2002 03:53:04 +0000 (03:53 +0000)
commit41180c5da4c85b05452d6c0d9c8ecd9b923c6c5b
treeb089d1818e88c684cbe1ff62946b482eb80fec17
parentfff16f04c31f0d67256a1b7f7d58b136b269c39d
Introduce support for Mandatory Access Control and extensible
kernel access control.

Add support for labeling most out-going ICMP messages using an
appropriate MAC entry point.  Currently, we do not explicitly
label packet reflect (timestamp, echo request) ICMP events,
implicitly using the originating packet label since the mbuf is
reused.  This will be made explicit at some point.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
sys/netinet/ip_icmp.c