rwatson 2008-05-22 07:18:54 UTC
FreeBSD src repository
Modified files:
sys/kern uipc_syscalls.c
Log:
When sendto(2) is called with an explicit destination address
argument, call mac_socket_check_connect() on that address before
proceeding with the send. Otherwise policies instrumenting the
connect entry point for the purposes of checking destination
addresses will not have the opportunity to check implicit
connect requests.
MFC after: 3 weeks
Sponsored by: nCircle Network Security, Inc.
Revision Changes Path
1.272 +5 -1 src/sys/kern/uipc_syscalls.c
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
