[Midnightbsd-cvs] [MidnightBSD/src] 6614af: update comment

Lucas Holt noreply at github.com
Sat Dec 31 14:15:26 EST 2022


  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 6614afcb1716ac79afd6474a25369762d39f910e
      https://github.com/MidnightBSD/src/commit/6614afcb1716ac79afd6474a25369762d39f910e
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-12-31 (Sat, 31 Dec 2022)

  Changed paths:
    M sys/netpfil/ipfilter/netinet/radix_ipf.c

  Log Message:
  -----------
  update comment


  Commit: d2baaa7507bc7e7ea84acebacb05fc8701301104
      https://github.com/MidnightBSD/src/commit/d2baaa7507bc7e7ea84acebacb05fc8701301104
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-12-31 (Sat, 31 Dec 2022)

  Changed paths:
    M sbin/ipf/libipf/interror.c
    M sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
    M sys/netpfil/ipfilter/netinet/ip_nat.c

  Log Message:
  -----------
  ipfilter: Support only jails in VNET
Jails without VNET have complete access to the ipfilter rules, NAT,
pools and logs. This is insecure. Only allow jails to manipulate
ipfilter rules, NAT tables and ippools if the jail has its own VNET.
Otherwise a jail can affect the global system.

This patch brings ipfilter in line with ipfw's support of VNET jails and
non-support of non-VNET jails.


  Commit: 012c5158a17be0ca456201a2ee4fc0e910d78e06
      https://github.com/MidnightBSD/src/commit/012c5158a17be0ca456201a2ee4fc0e910d78e06
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-12-31 (Sat, 31 Dec 2022)

  Changed paths:
    M lib/msun/src/w_cabsf.c
    M lib/msun/src/w_drem.c

  Log Message:
  -----------
  msun: Rewrite function definitions with identifier lists
This syntax is removed in C2x proposal N2432.


Compare: https://github.com/MidnightBSD/src/compare/19955c7d737a...012c5158a17b


More information about the Midnightbsd-cvs mailing list