Searched hist:"3 dc85f8d63ab3f4ffad639e356b5f9d00eb5d1ff" (Results 1 – 1 of 1) sorted by relevance
/freebsd/sys/net/ |
H A D | if_loop.c | diff 3dc85f8d63ab3f4ffad639e356b5f9d00eb5d1ff Sun Jan 11 00:50:23 CET 2009 Robert Watson <rwatson@FreeBSD.org> Do invoke mac_ifnet_check_transmit() and mac_ifnet_create_mbuf() in the loopback and synthetic loopback code so that packets are access control checked and relabeled. Previously, the MAC Framework enforced that packets sent over the loopback weren't relabeled, but this will allow policies to make explicit choices about how and whether to relabel packets on the loopback. Also, for SIMPLEX devices, this produces more consistent behavior for looped back packets to the local MAC address by labeling those packets as coming from the interface.
Discussed with: csjp Obtained from: TrustedBSD Project diff 3dc85f8d63ab3f4ffad639e356b5f9d00eb5d1ff Sun Jan 11 00:50:23 CET 2009 Robert Watson <rwatson@FreeBSD.org> Do invoke mac_ifnet_check_transmit() and mac_ifnet_create_mbuf() in the loopback and synthetic loopback code so that packets are access control checked and relabeled. Previously, the MAC Framework enforced that packets sent over the loopback weren't relabeled, but this will allow policies to make explicit choices about how and whether to relabel packets on the loopback. Also, for SIMPLEX devices, this produces more consistent behavior for looped back packets to the local MAC address by labeling those packets as coming from the interface.
Discussed with: csjp Obtained from: TrustedBSD Project
|