Deleted Added
full compact
mac_ifoff.c (172955) mac_ifoff.c (173138)
1/*-
2 * Copyright (c) 1999-2002, 2007 Robert N. M. Watson
3 * Copyright (c) 2001-2002 Networks Associates Technology, Inc.
4 * Copyright (c) 2006 SPARTA, Inc.
5 * All rights reserved.
6 *
7 * This software was developed by Robert Watson for the TrustedBSD Project.
8 *

--- 21 unchanged lines hidden (view full) ---

30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * SUCH DAMAGE.
37 *
1/*-
2 * Copyright (c) 1999-2002, 2007 Robert N. M. Watson
3 * Copyright (c) 2001-2002 Networks Associates Technology, Inc.
4 * Copyright (c) 2006 SPARTA, Inc.
5 * All rights reserved.
6 *
7 * This software was developed by Robert Watson for the TrustedBSD Project.
8 *

--- 21 unchanged lines hidden (view full) ---

30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * SUCH DAMAGE.
37 *
38 * $FreeBSD: head/sys/security/mac_ifoff/mac_ifoff.c 172955 2007-10-25 11:31:11Z rwatson $
38 * $FreeBSD: head/sys/security/mac_ifoff/mac_ifoff.c 173138 2007-10-29 13:33:06Z rwatson $
39 */
40
41/*
42 * Developed by the TrustedBSD Project.
43 *
44 * Limit access to interfaces until they are specifically administratively
45 * enabled. Prevents protocol stack-driven packet leakage in unsafe
46 * environments.

--- 65 unchanged lines hidden (view full) ---

112 return (0);
113
114 if (viabpf && ifoff_bpfrecv_enabled)
115 return (0);
116
117 return (EPERM);
118}
119
39 */
40
41/*
42 * Developed by the TrustedBSD Project.
43 *
44 * Limit access to interfaces until they are specifically administratively
45 * enabled. Prevents protocol stack-driven packet leakage in unsafe
46 * environments.

--- 65 unchanged lines hidden (view full) ---

112 return (0);
113
114 if (viabpf && ifoff_bpfrecv_enabled)
115 return (0);
116
117 return (EPERM);
118}
119
120/*
121 * Object-specific entry point implementations are sorted alphabetically by
122 * object type and then by operation.
123 */
120static int
121ifoff_bpfdesc_check_receive(struct bpf_d *d, struct label *dlabel,
122 struct ifnet *ifp, struct label *ifplabel)
123{
124
125 return (ifnet_check_incoming(ifp, 1));
126}
127

--- 42 unchanged lines hidden ---
124static int
125ifoff_bpfdesc_check_receive(struct bpf_d *d, struct label *dlabel,
126 struct ifnet *ifp, struct label *ifplabel)
127{
128
129 return (ifnet_check_incoming(ifp, 1));
130}
131

--- 42 unchanged lines hidden ---