INTRO (9) NetBSD Kernel Developer's Manual INTRO (9) NAME ...

KAUTH (9) NetBSD Kernel Developer’s Manual KAUTH (9)KAUTH_REQ_NETWORK_ALTQ_RIOKAUTH_REQ_NETWORK_ALTQ_WFQKAUTH_NETWORK_BINDChecks if a bind(2) request is allowed.req allows to indicate the type of the request to structure listeners and callers easier. Supportedrequest types:KAUTH_REQ_NETWORK_BIND_PRIVPORTChecks if binding to a privileged/reserved port is allowed.KAUTH_NETWORK_FIREWALLChecks if firewall-related operations are allowed.req indicates the sub-action, and can be one of the following:KAUTH_REQ_NETWORK_FIREWALL_FWModification of packet filtering rules.KAUTH_REQ_NETWORK_FIREWALL_NATModification of NAT rules.KAUTH_NETWORK_INTERFACEChecks if network interface-related operations are allowed.arg1 is (optionally) the struct ifnet ∗ associated with the interface. arg2 is(optionally) an int describing the interface-specific operation. arg3 is (optionally) apointer to the interface-specific request structure. req indicates the sub-action, and can beone of the following:KAUTH_REQ_NETWORK_INTERFACE_GETCheck if retrieving information from the device is allowed.KAUTH_REQ_NETWORK_INTERFACE_GETPRIVCheck if retrieving privileged information from the device is allowed.KAUTH_REQ_NETWORK_INTERFACE_SETCheck if setting parameters on the device is allowed.KAUTH_REQ_NETWORK_INTERFACE_SETPRIVCheck if setting privileged parameters on the device is allowed.Note that unless the struct ifnet ∗ for the interface was passed in arg1, there’s noway totell what structure arg3 is.KAUTH_NETWORK_FORWSRCRTChecks whether status of forwarding of source-routed packets can be modified or not.KAUTH_NETWORK_NFSCheck is an NFS related operation is allowed.req can be any ofthe following:KAUTH_REQ_NETWORK_NFS_EXPORTCheck if modifying the NFS export table is allowed.KAUTH_REQ_NETWORK_NFS_SVCCheck if access to the NFS nfssvc(2) syscall is allowed.NetBSD 3.0 February 28, 2008 7