OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
CVS: cvs.openbsd.org: src

From: Henning Brauer (henningcvs.openbsd.org)
Date: Fri Feb 09 2007 - 05:20:39 CST


CVSROOT: /cvs
Module name: src
Changes by: henningcvs.openbsd.org 2007/02/09 04:20:39

Modified files:
        sys/net : pf_ioctl.c pfvar.h

Log message:
allow counters to be reset with DIOCGETRULES.
this allows an atomic read and reset counters, instead of read, reset in a
later ioctl and lose everything in between.
use the previously unused of pr->action. When it is set to PF_GET_CLR_CNTR,
the ioctl requires write permissions and counters are reset after they have
been copied out to userland.
obsoletes DIOCCLRRULECTRS, which only works for the main ruleset, but not
within anchors (yeah, that's how it all started)
ok dhartmei, mcbride and theo agree as well