Subject: CVS commit: src
To: None <source-changes@NetBSD.org>
From: Elad Efrat <elad@netbsd.org>
List: source-changes
Date: 10/25/2006 22:49:24
Module Name:	src
Committed By:	elad
Date:		Wed Oct 25 22:49:24 UTC 2006

Modified Files:
	src/share/examples/secmodel: secmodel_example.c
	src/share/man/man9: kauth.9
	src/sys/kern: uipc_socket.c
	src/sys/net: raw_usrreq.c
	src/sys/netinet: raw_ip.c
	src/sys/secmodel/bsd44: secmodel_bsd44_suser.c
	src/sys/sys: kauth.h

Log Message:
Introduce KAUTH_REQ_NETWORK_SOCKET_OPEN, to check if opening a socket is
allowed. It takes three int * arguments indicating domain, type, and
protocol. Replace previous KAUTH_REQ_NETWORK_SOCKET_RAWSOCK with it (but
keep it still).

Places that used to explicitly check for privileged context now don't
need it anymore, so I replaced these with XXX comment indiacting it for
future reference.

Documented and updated examples as well.


To generate a diff of this commit:
cvs rdiff -r1.4 -r1.5 src/share/examples/secmodel/secmodel_example.c
cvs rdiff -r1.26 -r1.27 src/share/man/man9/kauth.9
cvs rdiff -r1.126 -r1.127 src/sys/kern/uipc_socket.c
cvs rdiff -r1.28 -r1.29 src/sys/net/raw_usrreq.c
cvs rdiff -r1.93 -r1.94 src/sys/netinet/raw_ip.c
cvs rdiff -r1.12 -r1.13 src/sys/secmodel/bsd44/secmodel_bsd44_suser.c
cvs rdiff -r1.15 -r1.16 src/sys/sys/kauth.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.