| Commit message (Expand) | Author | Age | Files | Lines |
* | Rename mac_check_socket_receive() to mac_check_socket_deliver() so that | Robert Watson | 2002-08-15 | 1 | -2/+2 |
* | Add mac.h -- raw_ip.c was depending on nested inclusion of mac.h which | Robert Watson | 2002-08-15 | 1 | -0/+1 |
* | Introduce support for Mandatory Access Control and extensible | Robert Watson | 2002-07-31 | 1 | -17/+41 |
* | Remember to initialize the control block head mutex. | Jeffrey Hsu | 2002-06-11 | 1 | -0/+1 |
* | Lock up inpcb. | Jeffrey Hsu | 2002-06-10 | 1 | -2/+23 |
* | Back out my lats commit of locking down a socket, it conflicts with hsu's work. | Seigo Tanimura | 2002-05-31 | 1 | -43/+9 |
* | Lock down a socket, milestone 1. | Seigo Tanimura | 2002-05-20 | 1 | -9/+43 |
* | Revert the change of #includes in sys/filedesc.h and sys/socketvar.h. | Seigo Tanimura | 2002-04-30 | 1 | -2/+5 |
* | Change the suser() API to take advantage of td_ucred as well as do a | John Baldwin | 2002-04-01 | 1 | -1/+1 |
* | Merge from TrustedBSD MAC branch: | Robert Watson | 2002-03-22 | 1 | -2/+2 |
* | Switch vm_zone.h with uma.h. Change over to uma interfaces. | Jeff Roberson | 2002-03-20 | 1 | -3/+4 |
* | Simple p_ucred -> td_ucred changes to start using the per-thread ucred | John Baldwin | 2002-02-27 | 1 | -1/+1 |
* | Restore the ability to use IP_FW_ADD with setsockopt(2) that got | Ruslan Ermilov | 2001-11-26 | 1 | -0/+1 |
* | o Replace reference to 'struct proc' with 'struct thread' in 'struct | Robert Watson | 2001-11-08 | 1 | -1/+1 |
* | MFS: sync the ipfw/dummynet/bridge code with the one recently merged | Luigi Rizzo | 2001-11-04 | 1 | -16/+13 |
* | - Combine kern.ps_showallprocs and kern.ipc.showallsockets into | Robert Watson | 2001-10-09 | 1 | -2/+2 |
* | Only allow users to see their own socket connections if | Paul Saab | 2001-10-05 | 1 | -1/+6 |
* | Make it so dummynet and bridge can be loaded as modules. | Paul Saab | 2001-10-05 | 1 | -9/+7 |
* | KSE Milestone 2 | Julian Elischer | 2001-09-12 | 1 | -6/+6 |
* | Patches from Keiichi SHIMA <keiichi@iij.ad.jp> | Julian Elischer | 2001-09-03 | 1 | -2/+3 |
* | move ipsec security policy allocation into in_pcballoc, before | Hajimu UMEMOTO | 2001-07-26 | 1 | -7/+0 |
* | Sync with recent KAME. | Hajimu UMEMOTO | 2001-06-11 | 1 | -4/+25 |
* | Add ``options RANDOM_IP_ID'' which randomizes the ID field of IP packets. | Kris Kennaway | 2001-06-01 | 1 | -0/+5 |
* | In in_ifadown(), differentiate between whether the interface goes | Ruslan Ermilov | 2001-05-11 | 1 | -1/+1 |
* | <sys/queue.h> makeover. | Poul-Henning Kamp | 2001-03-16 | 1 | -4/+2 |
* | Make it possible to use IP_TTL and IP_TOS setsockopt(2) options | Ruslan Ermilov | 2001-03-09 | 1 | -2/+3 |
* | Mechanical change to use <sys/queue.h> macro API instead of | Poul-Henning Kamp | 2001-02-04 | 1 | -6/+6 |
* | * Rename M_WAIT mbuf subsystem flag to M_TRYWAIT. | Bosko Milekic | 2000-12-21 | 1 | -1/+1 |
* | Move suser() and suser_xxx() prototypes and a related #define from | Poul-Henning Kamp | 2000-10-29 | 1 | -1/+0 |
* | Allow for IP_FW_ADD to be used in getsockopt(2) incarnation as | Ruslan Ermilov | 2000-10-12 | 1 | -0/+1 |
* | Follow BSD/OS and NetBSD, keep the ip_id field in network order all the time. | Ruslan Ermilov | 2000-09-14 | 1 | -1/+1 |
* | Fixed broken ICMP error generation, unified conversion of IP header | Ruslan Ermilov | 2000-09-01 | 1 | -1/+1 |
* | sync with kame tree as of july00. tons of bug fixes/improvements. | Jun-ichiro itojun Hagino | 2000-07-04 | 1 | -3/+2 |
* | Previous commit changing SYSCTL_HANDLER_ARGS violated KNF. | Poul-Henning Kamp | 2000-07-04 | 1 | -1/+1 |
* | Style police catches up with rev 1.26 of src/sys/sys/sysctl.h: | Poul-Henning Kamp | 2000-07-03 | 1 | -1/+1 |
* | IPSEC support in the kernel. | Yoshinobu Inoue | 1999-12-22 | 1 | -8/+33 |
* | M_PREPEND-related cleanups (unregisterifying struct mbuf *s). | Brian Feldman | 1999-12-19 | 1 | -1/+1 |
* | KAME netinet6 basic part(no IPsec,no V6 Multicast Forwarding, no UDP/TCP | Yoshinobu Inoue | 1999-11-22 | 1 | -8/+8 |
* | $Id$ -> $FreeBSD$ | Peter Wemm | 1999-08-28 | 1 | -1/+1 |
* | Make ipfw's logging more dynamic. Now, log will use the default limit | Brian Feldman | 1999-08-01 | 1 | -1/+2 |
* | Add sysctl descriptions to many SYSCTL_XXXs | Bill Fumerola | 1999-05-03 | 1 | -5/+5 |
* | Suser() simplification: | Poul-Henning Kamp | 1999-04-27 | 1 | -2/+2 |
* | Tidy up some stray / unused stuff in the IPFW package and friends. | Peter Wemm | 1999-04-20 | 1 | -23/+1 |
* | Last bits (i think) of dummynet for -current. | Luigi Rizzo | 1998-12-14 | 1 | -1/+23 |
* | Yow! Completely change the way socket options are handled, eliminating | Garrett Wollman | 1998-08-23 | 1 | -82/+108 |
* | Convert socket structures to be type-stable and add a version number. | Garrett Wollman | 1998-05-15 | 1 | -2/+88 |
* | Fixed style bugs (mostly) in previous commit. | Bruce Evans | 1998-03-28 | 1 | -2/+3 |
* | Use the zone allocator to allocate inpcbs and tcpcbs. Each protocol creates | Garrett Wollman | 1998-03-24 | 1 | -1/+4 |
* | Improved connection establishment performance by doing local port lookups via | David Greenman | 1998-01-27 | 1 | -1/+2 |
* | Call in_pcballoc() at splnet(). As near as I can tell, this won't fix | David Greenman | 1997-12-18 | 1 | -4/+9 |