diff options
author | jamie <jamie@FreeBSD.org> | 2009-06-23 20:35:51 +0000 |
---|---|---|
committer | jamie <jamie@FreeBSD.org> | 2009-06-23 20:35:51 +0000 |
commit | eeafb36508ef6b5677597f46291958c39c792c19 (patch) | |
tree | d8a8a4f7a31ad5b55c33c6e090a31b4ca13703d4 /lib/libc | |
parent | 6f1a23c328f27fbb904a8a2629fef6cf83b62840 (diff) | |
download | FreeBSD-src-eeafb36508ef6b5677597f46291958c39c792c19.zip FreeBSD-src-eeafb36508ef6b5677597f46291958c39c792c19.tar.gz |
Add a limit for child jails via the "children.cur" and "children.max"
parameters. This replaces the simple "allow.jails" permission.
Approved by: bz (mentor)
Diffstat (limited to 'lib/libc')
-rw-r--r-- | lib/libc/sys/jail.2 | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/lib/libc/sys/jail.2 b/lib/libc/sys/jail.2 index 4b047bf..2e14f0d 100644 --- a/lib/libc/sys/jail.2 +++ b/lib/libc/sys/jail.2 @@ -25,7 +25,7 @@ .\" .\" $FreeBSD$ .\" -.Dd May 27, 2009 +.Dd June 23, 2009 .Dt JAIL 2 .Os .Sh NAME @@ -293,9 +293,9 @@ will fail if: .Bl -tag -width Er .It Bq Er EPERM This process is not allowed to create a jail, either because it is not -the super-user, or because it is in a jail where the -.Va allow.jails -parameter is not set. +the super-user, or because it would exceed the jail's +.Va children.max +limit. .It Bq Er EFAULT .Fa jail points to an address outside the allocated address space of the process. @@ -312,9 +312,9 @@ will fail if: .Bl -tag -width Er .It Bq Er EPERM This process is not allowed to create a jail, either because it is not -the super-user, or because it is in a jail where the -.Va allow.jails -parameter is not set. +the super-user, or because it would exceed the jail's +.Va children.max +limit. .It Bq Er EPERM A jail parameter was set to a less restrictive value then the current environment. |