From 62711fdfd16c16b620e2e366b1afd1b13a502e40 Mon Sep 17 00:00:00 2001
From: rwatson <rwatson@FreeBSD.org>
Date: Sat, 20 Jun 2009 17:42:53 +0000
Subject: Invoke the MAC Framework's mac_socket_create_mbuf() entry point when
 generating IPX output for raw and datagram IPX sockets.

Obtained from:	TrustedBSD Project
---
 sys/netipx/ipx_usrreq.c | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'sys/netipx/ipx_usrreq.c')

diff --git a/sys/netipx/ipx_usrreq.c b/sys/netipx/ipx_usrreq.c
index a42f4d2..ef9c1ad 100644
--- a/sys/netipx/ipx_usrreq.c
+++ b/sys/netipx/ipx_usrreq.c
@@ -90,6 +90,8 @@ __FBSDID("$FreeBSD$");
 #include <netipx/ipx_pcb.h>
 #include <netipx/ipx_var.h>
 
+#include <security/mac/mac_framework.h>
+
 /*
  * IPX protocol implementation.
  */
@@ -577,6 +579,9 @@ ipx_send(struct socket *so, int flags, struct mbuf *m, struct sockaddr *nam,
 	 * used by ipx_pcbconnect() and ipx_pcbdisconnect(), just the IPX
 	 * pcb lock.
 	 */
+#ifdef MAC
+	mac_socket_create_mbuf(so, m);
+#endif
 	if (nam != NULL) {
 		IPX_LIST_LOCK();
 		IPX_LOCK(ipxp);
-- 
cgit v1.1