Changeset View

Standalone View

Show First 20 Lines • Show All 167 Lines • ▼ Show 20 Lines	if (mac_policy_count == 0)
return;		return;

label = mac_mbuf_to_label(m);		label = mac_mbuf_to_label(m);

MAC_POLICY_PERFORM_NOSLEEP(ip6q_update, m, label, q6,		MAC_POLICY_PERFORM_NOSLEEP(ip6q_update, m, label, q6,
q6->ip6q_label);		q6->ip6q_label);
}		}

		/* Check with rules in module if the IPv6 address is allowed. */
		int
		mac_inet6_check_add_addr(struct ucred cred, const struct in6_addr ia6,
		struct ifnet *ifp)
		bzUnsubmitted Done Inline Actions Do we need the NOTE? bz: Do we need the NOTE?
		{
		int error;

		MAC_POLICY_CHECK(ip6_check_jail, cred, ia6, ifp);
		return (error);
		}

void		void
mac_netinet6_nd6_send(struct ifnet ifp, struct mbuf m)		mac_netinet6_nd6_send(struct ifnet ifp, struct mbuf m)
{		{
struct label *mlabel;		struct label *mlabel;

if (mac_policy_count == 0)		if (mac_policy_count == 0)
return;		return;

mlabel = mac_mbuf_to_label(m);		mlabel = mac_mbuf_to_label(m);

MAC_POLICY_PERFORM_NOSLEEP(netinet6_nd6_send, ifp, if_getmaclabel(ifp), m,		MAC_POLICY_PERFORM_NOSLEEP(netinet6_nd6_send, ifp, if_getmaclabel(ifp), m,
mlabel);		mlabel);
}		}