Stop the admin from creating nodes under net.inet.ip.interfaces or

net.inet.ip.interfaces.<ifname>.
This commit is contained in:
dyoung 2009-08-30 02:03:58 +00:00
parent 58692c6275
commit ce7dbb45a0

View File

@ -1,4 +1,4 @@
/* $NetBSD: in_selsrc.c,v 1.6 2007/12/04 10:33:11 dyoung Exp $ */
/* $NetBSD: in_selsrc.c,v 1.7 2009/08/30 02:03:58 dyoung Exp $ */
/*-
* Copyright (c) 2005 David Young. All rights reserved.
@ -35,7 +35,7 @@
*/
#include <sys/cdefs.h>
__KERNEL_RCSID(0, "$NetBSD: in_selsrc.c,v 1.6 2007/12/04 10:33:11 dyoung Exp $");
__KERNEL_RCSID(0, "$NetBSD: in_selsrc.c,v 1.7 2009/08/30 02:03:58 dyoung Exp $");
#include "opt_inet.h"
#include "opt_inet_conf.h"
@ -508,7 +508,7 @@ in_domifattach_sysctl(struct in_ifsysctl *isc)
const struct sysctlnode *rnode;
if ((rc = sysctl_createv(&isc->isc_log, 0, NULL, &rnode,
CTLFLAG_READWRITE, CTLTYPE_NODE,
CTLFLAG_READONLY, CTLTYPE_NODE,
"interfaces", NULL,
NULL, 0, NULL, 0,
CTL_NET, PF_INET, IPPROTO_IP, CTL_CREATE,
@ -518,7 +518,7 @@ in_domifattach_sysctl(struct in_ifsysctl *isc)
return NULL;
}
if ((rc = sysctl_createv(&isc->isc_log, 0, &rnode, &rnode,
CTLFLAG_READWRITE, CTLTYPE_NODE,
CTLFLAG_READONLY, CTLTYPE_NODE,
isc->isc_ifp->if_xname,
SYSCTL_DESCR("interface ip options"),
NULL, 0, NULL, 0, CTL_CREATE, CTL_EOL)) != 0) {