1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-14 10:09:48 +00:00
freebsd/sys/modules
Christian S.J. Peron d94f2a68f8 Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point
exists to allow the mandatory access control policy to properly initialize
mbufs generated by the firewall. An example where this might happen is keep
alive packets, or ICMP error packets in response to other packets.

This takes care of kernel panics associated with un-initialize mbuf labels
when the firewall generates packets.

[1] I modified this patch from it's original version, the initial patch
    introduced a number of entry points which were programmatically
    equivalent. So I introduced only one. Instead, we should leverage
    mac_create_mbuf_netlayer() which is used for similar situations,
    an example being icmp_error()

    This will minimize the impact associated with the MFC

Submitted by:	mlaier [1]
MFC after:	1 week

This is a RELENG_6 candidate
2006-09-12 04:25:13 +00:00
..
3dfx Take the functionality contained in the former "options TDFX_LINUX" 2006-03-03 21:37:38 +00:00
3dfx_linux Take the functionality contained in the former "options TDFX_LINUX" 2006-03-03 21:37:38 +00:00
aac
accf_data
accf_http
acpi Dike out WARNS from kernel module makefiles. Kernels and modules 2006-05-30 09:38:54 +00:00
agp Include agp_i810.c in amd64 AGP builds to get support for the Intel 915 Express 2006-09-05 16:55:13 +00:00
aha
ahb
aic
aic7xxx
aio
amd
amr Tie the amr_linux module into the build for i386 & amd64 2006-01-25 18:11:59 +00:00
an
aout
apm
ar
arcmsr
arcnet INET doesn't belong to opt_inet6.h: INET6 belongs to it. 2006-02-07 18:13:56 +00:00
arl
asr Remove Alpha remnants. 2006-07-27 19:12:49 +00:00
ata Remove debug flag. 2006-03-11 08:42:08 +00:00
ath o add opt_ath.h enable tweaking various config parameters for the driver 2006-04-03 18:14:02 +00:00
ath_hal add powerpc glue 2006-06-08 23:36:35 +00:00
ath_rate_amrr
ath_rate_onoe
ath_rate_sample
aue
auxio
awi
axe
bce Add a driver for the Broadcom NetXtreme II (BCM5706/BCM5708) 2006-04-10 19:55:23 +00:00
bfe
bge
bios
bktr Housekeeping. Update for maintainers who have handed in their commit bits 2006-07-01 10:51:55 +00:00
bridgestp Add bridgestp as a seperate module. 2006-07-26 22:07:39 +00:00
cam
canbepm
canbus
cardbus Implement /dev/cardbus%d.cis, same thing as /dev/pccard%d.cis. There 2005-12-29 01:43:47 +00:00
cbb
cd9660
cd9660_iconv
cdce
ce NO_MAN is not needed here. 2006-03-16 15:18:17 +00:00
ciss
cm
coda
coda5 CODA_COMPAT_5 may not be defined unconditionally in the coda5 module. 2006-02-27 12:04:13 +00:00
coff
cp NO_MAN is not needed here. 2006-03-16 15:18:17 +00:00
cpufreq Dike out WARNS from kernel module makefiles. Kernels and modules 2006-05-30 09:38:54 +00:00
crypto This patch fixes a problem, which exists if you have IPSEC in your kernel 2006-02-27 16:56:22 +00:00
cryptodev
cs
ctau
cue
cx
dc
dcons
dcons_crom
de Move de from pci to dev/de 2006-02-26 17:51:22 +00:00
digi
dpt
drm
dummynet Reimplementation of world/kernel build options. For details, see: 2006-03-17 18:54:44 +00:00
ed
elink
em
en
ep
esp
ex
exca
ext2fs
fatm
fdc Dike out WARNS from kernel module makefiles. Kernels and modules 2006-05-30 09:38:54 +00:00
fdescfs
fe
firewire Style: Remove blank lines before EOF. 2006-02-18 23:49:28 +00:00
firmware firmware(9) is a subsystem to load binary data into the kernel via a 2006-01-29 02:52:42 +00:00
fxp
gem
geom Don't expect that 'device random' will compile in those files into the 2006-06-09 17:36:50 +00:00
harp
hatm
hfa
hifn
hme
hpfs
hptmv
hwpmc Remove Alpha remnants. 2006-07-27 19:12:49 +00:00
i2c Drivers for AMD-8111 and NVIDIA nForce2/3/4 SMBus 2.0 controllers. 2005-12-21 15:49:51 +00:00
ibcs2
ichwd
ida
idt
ie
if_bridge bridgestp is now a seperate module. 2006-07-26 22:15:15 +00:00
if_disc
if_ef Don't use touch when what is really meant is :> (create an empty file, or 2006-08-14 13:28:53 +00:00
if_faith
if_gif Reimplementation of world/kernel build options. For details, see: 2006-03-17 18:54:44 +00:00
if_gre
if_ndis
if_ppp Don't use touch when what is really meant is :> (create an empty file, or 2006-08-14 13:28:53 +00:00
if_sl
if_stf
if_tap
if_tun
if_vlan Fix standalone module build. 2006-02-17 10:52:59 +00:00
iir
io
ip_mroute_mod
ipdivert
ipfilter Reimplementation of world/kernel build options. For details, see: 2006-03-17 18:54:44 +00:00
ipfw Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point 2006-09-12 04:25:13 +00:00
ipmi Add an OpenIPMI mostly compatible driver. This driver was developed 2006-02-10 20:51:35 +00:00
ips
ipw
isp
ispfw Add 2400 f/w support. 2006-08-26 18:40:25 +00:00
iwi remove depedancy with vnode_if.h. 2006-03-12 19:06:06 +00:00
ixgb
joy
kbdmux Provide ability to disable kbdmux(4) with the hint.kbdmux.0.disabled="1" hint. 2006-03-01 18:34:48 +00:00
kue
le - Add C-bus and ISA front-ends for le(4) so it can actually replace 2006-05-17 21:25:23 +00:00
lge
libalias
libiconv
libmbpool
libmchain
linprocfs - Add the new files to the linux module. 2006-08-15 13:01:36 +00:00
linsysfs - Add the new files to the linux module. 2006-08-15 13:01:36 +00:00
linux - Add the new files to the linux module. 2006-08-15 13:01:36 +00:00
lmc
lpt
mac_biba
mac_bsdextended
mac_ifoff
mac_lomac
mac_mls
mac_none
mac_partition
mac_portacl
mac_seeotheruids
mac_stub
mac_test
mcd
md
mem
mfi Remove cruft. 2006-05-29 18:05:26 +00:00
mii Connect gentbi, ip1000phy to the build. 2006-07-25 00:20:11 +00:00
mlx
mly
mpt
mqueue
msdosfs
msdosfs_iconv
mse
mxge - Complete the myri10ge -> mxge name change by doing a mechanical 2006-06-13 13:53:52 +00:00
my
ncp
ncv
ndis
netgraph Don't use touch when what is really meant is :> (create an empty file, or 2006-08-14 13:28:53 +00:00
nfe Add a pure open source nForce Ethernet driver, under BSDL. 2006-06-26 23:41:07 +00:00
nfs4client Style: Remove blank lines before EOF. 2006-02-18 23:49:28 +00:00
nfsclient Style: Remove blank lines before EOF. 2006-02-18 23:49:28 +00:00
nfsserver
nge
nmdm
nsp
ntfs
ntfs_iconv
nullfs
nve
nwfs opt_vmpage.h is no longer needed here because it is not included by 2006-01-26 19:21:27 +00:00
oltr
padlock Implement support for HMAC/SHA1 and HMAC/SHA256 acceleration found in 2006-07-22 16:18:47 +00:00
patm
pccard
pcfclock
pcn
pecoff
pf Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point 2006-09-12 04:25:13 +00:00
pflog Reimplementation of world/kernel build options. For details, see: 2006-03-17 18:54:44 +00:00
plip
pmc
portalfs
powermac_nvram Add device to access and modify Open Firmware NVRAM settings in 2006-08-01 22:19:01 +00:00
ppbus
ppc Make this usable for all platforms. 2006-06-18 05:04:42 +00:00
ppi
pps
procfs
pseudofs
pst
puc Rewrite of puc(4). Significant changes are: 2006-04-28 21:21:53 +00:00
ral Add support for the second (RT2561/RT2561S) and third (RT2661 MIMO XR) 2006-03-05 20:38:55 +00:00
random
ray
rc
rc4
re
reiserfs
rl
rndtest
rp
rr232x Remove hand-rolled cross-build glue. Normal cross-build infrastructure 2006-05-05 14:26:28 +00:00
rue
s3
safe
sbni
sbsh
scc Build the scc(4) module with EBus and SBus attachments for sparc64 2006-04-01 04:54:47 +00:00
scd
scsi_low
sem
sf
sio Rewrite of puc(4). Significant changes are: 2006-04-28 21:21:53 +00:00
sis
sk The sk(4) driver has moved to /sys/dev/sk 2006-04-27 00:14:02 +00:00
slhci
smbfs Retire NETSMBCRYPTO as a kernel option and make its functionality 2006-03-05 22:52:17 +00:00
sn
snc
snp
sound If building the module as part of the kernel build, determine 2006-09-04 07:40:53 +00:00
speaker
splash
sppp
sr
ste
stg
stge Hook up stge(4) to the build. 2006-07-25 00:45:55 +00:00
streams Housekeeping. Update for maintainers who have handed in their commit bits 2006-07-01 10:51:55 +00:00
svr4 Housekeeping. Update for maintainers who have handed in their commit bits 2006-07-01 10:51:55 +00:00
sym
syscons
sysvipc
ti The if_ti Tigon I/II driver has moved to /sys/dev/ti 2005-12-10 00:38:33 +00:00
tl
trm
twa Style: Remove blank lines before EOF. 2006-02-18 23:49:28 +00:00
twe
tx
txp
uart o Add scc(4) to the build. 2006-03-30 18:39:24 +00:00
ubsa
ubsec
ubser
ucom
ucycom
udav
udbp
udf
udf_iconv
ufm
ufoma Add FOMA (NTT DoCoMo 3G mobile phone system) driver. 2006-01-09 17:46:36 +00:00
ufs
uftdi
ugen
uhid
ukbd
ulpt
umapfs
umass
umct
umodem
ums
unionfs
uplcom
ural
urio
usb
uscanner
utopia
uvisor
uvscom
vesa
vge
vkbd
vpo
vr
vx
wb
wi
wlan
wlan_acl
wlan_ccmp
wlan_tkip
wlan_wep
wlan_xauth
xe
xfs Makefile changes to accomodate new XFS import. 2006-06-09 06:10:17 +00:00
xl
zlib
Makefile Build linprocfs and linsysfs as modules on amd64. 2006-09-09 16:58:22 +00:00
Makefile.inc