MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodesDo this only when the headers for these functionalities were includedprior to this one. Indeed, if they need to be included,
MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodesDo this only when the headers for these functionalities were includedprior to this one. Indeed, if they need to be included, style(9)mandates they should have been so before this one.Remove the common MAC sysctl declaration from<security/mac/mac_internal.h>, as it is now redundant (all its includersalso include <security/mac/mac_policy.h>).Remove local such declarations from all policies' files.Reviewed by: jamieApproved by: markj (mentor)MFC after: 5 daysSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D46903
show more ...
mac_ipacl: Use IfAPIUse `if_t` instead of `struct ifnet *`, and if_name() accessor.Sponsored by: Juniper Networks, Inc.
sys: Remove $FreeBSD$: two-line .h patternRemove /^\s*\*\n \*\s+\$FreeBSD\$$\n/
mac_ipacl: new MAC policy module to limit jail/vnet IP configurationThe mac_ipacl policy module enables fine-grained control over IP addressconfiguration within VNET jails from the base system.It
mac_ipacl: new MAC policy module to limit jail/vnet IP configurationThe mac_ipacl policy module enables fine-grained control over IP addressconfiguration within VNET jails from the base system.It allows the root user to define rules governing IP addresses forjails and their interfaces using the sysctl interface.Requested by: multipleSponsored by: Google, Inc. (GSoC 2019)MFC after: 2 monthsReviewed by: bz, dch (both earlier versions)Differential Revision: https://reviews.freebsd.org/D20967