NetBSD/sys/netipsec
elad 0c9d8d15c9 Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls with
something meaningful. All relevant documentation has been updated or
written.

Most of these changes were brought up in the following messages:

    http://mail-index.netbsd.org/tech-kern/2012/01/18/msg012490.html
    http://mail-index.netbsd.org/tech-kern/2012/01/19/msg012502.html
    http://mail-index.netbsd.org/tech-kern/2012/02/17/msg012728.html

Thanks to christos, manu, njoly, and jmmv for input.

Huge thanks to pgoyette for spinning these changes through some build
cycles and ATF.
2012-03-13 18:40:26 +00:00
..
Makefile more IPSEC header cleanup: don't install unneeded headers to userland, 2012-01-06 14:17:10 +00:00
ah.h
ah_var.h
esp.h
esp_var.h
files.netipsec Make FAST_IPSEC the default IPSEC implementation which is built 2012-01-09 15:16:30 +00:00
ipcomp.h
ipcomp_var.h
ipip_var.h
ipsec.c Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls with 2012-03-13 18:40:26 +00:00
ipsec.h more IPSEC header cleanup: don't install unneeded headers to userland, 2012-01-06 14:17:10 +00:00
ipsec6.h
ipsec_input.c After IPSEC input processing, pass a decoded/authenticated IPv4 packet 2012-01-25 21:58:10 +00:00
ipsec_mbuf.c
ipsec_netbsd.c
ipsec_osdep.h add missing rnd_extract->cprng_fast conversion, fixes build of 2011-11-29 13:15:27 +00:00
ipsec_output.c add patch from Arnaud Degroote to handle IPv6 extended options with 2012-01-10 20:01:56 +00:00
ipsec_private.h
ipsec_var.h
key.c allow the ESP fragment length in the NAT-T case to be reported back 2012-01-09 15:42:08 +00:00
key.h
key_debug.c
key_debug.h
key_var.h
keydb.h protect "union sockaddr_union" from being defined twice by a CPP symbol 2012-01-11 14:37:45 +00:00
keysock.c
keysock.h
xform.h
xform_ah.c remove some DPRINTFs which are not just diagnostics but cause noise 2012-01-26 21:10:24 +00:00
xform_esp.c Make sure the mbufs in the input path (only the parts which we are going 2012-01-25 20:31:23 +00:00
xform_ipcomp.c Make sure the mbufs in the input path (only the parts which we are going 2012-01-25 20:31:23 +00:00
xform_ipip.c
xform_tcp.c fix build in the (FAST_)IPSEC & TCP_SIGNATURE case 2012-01-11 14:39:08 +00:00