xnu-7195.101.1.tar.gz

[apple/xnu.git] / bsd / net / route.c

diff --git a/bsd/net/route.c b/bsd/net/route.c
index a31e25bb60577f2e8359104fdb64bc670b28d4c0..91000a4ee0f250e9bc60afb0bb4117dd0dce40bb 100644 (file)
--- a/bsd/net/route.c
+++ b/bsd/net/route.c
@@ -1847,6 +1847,14 @@ rtrequest_common_locked(int req, struct sockaddr *dst0,
            int, flags, unsigned int, ifscope);
 
        LCK_MTX_ASSERT(rnh_lock, LCK_MTX_ASSERT_OWNED);
            int, flags, unsigned int, ifscope);
 
        LCK_MTX_ASSERT(rnh_lock, LCK_MTX_ASSERT_OWNED);

+
+#if !(DEVELOPMENT || DEBUG)
+       /*
+        * Setting the global internet flag external is only for testing
+        */
+       flags &= ~RTF_GLOBAL;
+#endif /* !(DEVELOPMENT || DEBUG) */
+

        /*
         * Find the correct routing tree to use for this Address Family
         */
        /*
         * Find the correct routing tree to use for this Address Family
         */


@@ -2342,6 +2350,16 @@ makeroute:
                 * necp client watchers to re-evaluate
                 */
                if (SA_DEFAULT(rt_key(rt))) {
                 * necp client watchers to re-evaluate
                 */
                if (SA_DEFAULT(rt_key(rt))) {

+                       /*
+                        * Mark default routes as (potentially) leading to the global internet
+                        * this can be used for policy decisions.
+                        * The clone routes will inherit this flag.
+                        * We check against the host flag as this works for default routes that have
+                        * a gateway and defaults routes when all subnets are local.
+                        */
+                       if (req == RTM_ADD && (rt->rt_flags & RTF_HOST) == 0) {
+                               rt->rt_flags |= RTF_GLOBAL;
+                       }

                        if (rt->rt_ifp != NULL) {
                                ifnet_touch_lastupdown(rt->rt_ifp);
                        }
                        if (rt->rt_ifp != NULL) {
                                ifnet_touch_lastupdown(rt->rt_ifp);
                        }