[src/trunk]: src/sys/netinet Stop the admin from creating nodes under net.ine...

[dyoung <dyoung%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/2d0b2d51aa0a
branches:  trunk
changeset: 747046:2d0b2d51aa0a
user:      dyoung <dyoung%NetBSD.org@localhost>
date:      Sun Aug 30 02:03:58 2009 +0000

description:
Stop the admin from creating nodes under net.inet.ip.interfaces or
net.inet.ip.interfaces.<ifname>.

diffstat:

 sys/netinet/in_selsrc.c |  8 ++++----
 1 files changed, 4 insertions(+), 4 deletions(-)

diffs (36 lines):

diff -r 7459362bac3f -r 2d0b2d51aa0a sys/netinet/in_selsrc.c
--- a/sys/netinet/in_selsrc.c   Sun Aug 30 02:00:56 2009 +0000
+++ b/sys/netinet/in_selsrc.c   Sun Aug 30 02:03:58 2009 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: in_selsrc.c,v 1.6 2007/12/04 10:33:11 dyoung Exp $     */
+/*     $NetBSD: in_selsrc.c,v 1.7 2009/08/30 02:03:58 dyoung Exp $     */
 
 /*-
  * Copyright (c) 2005 David Young.  All rights reserved.
@@ -35,7 +35,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: in_selsrc.c,v 1.6 2007/12/04 10:33:11 dyoung Exp $");
+__KERNEL_RCSID(0, "$NetBSD: in_selsrc.c,v 1.7 2009/08/30 02:03:58 dyoung Exp $");
 
 #include "opt_inet.h"
 #include "opt_inet_conf.h"
@@ -508,7 +508,7 @@
        const struct sysctlnode *rnode;
 
        if ((rc = sysctl_createv(&isc->isc_log, 0, NULL, &rnode,
-                                CTLFLAG_READWRITE, CTLTYPE_NODE,
+                                CTLFLAG_READONLY, CTLTYPE_NODE,
                                 "interfaces", NULL,
                                 NULL, 0, NULL, 0,
                                 CTL_NET, PF_INET, IPPROTO_IP, CTL_CREATE,
@@ -518,7 +518,7 @@
                return NULL;
        }
        if ((rc = sysctl_createv(&isc->isc_log, 0, &rnode, &rnode,
-                                CTLFLAG_READWRITE, CTLTYPE_NODE,
+                                CTLFLAG_READONLY, CTLTYPE_NODE,
                                 isc->isc_ifp->if_xname,
                                 SYSCTL_DESCR("interface ip options"),
                                 NULL, 0, NULL, 0, CTL_CREATE, CTL_EOL)) != 0) {