summaryrefslogtreecommitdiffstats
path: root/lib
diff options
context:
space:
mode:
authorjamie <jamie@FreeBSD.org>2009-06-23 20:35:51 +0000
committerjamie <jamie@FreeBSD.org>2009-06-23 20:35:51 +0000
commiteeafb36508ef6b5677597f46291958c39c792c19 (patch)
treed8a8a4f7a31ad5b55c33c6e090a31b4ca13703d4 /lib
parent6f1a23c328f27fbb904a8a2629fef6cf83b62840 (diff)
downloadFreeBSD-src-eeafb36508ef6b5677597f46291958c39c792c19.zip
FreeBSD-src-eeafb36508ef6b5677597f46291958c39c792c19.tar.gz
Add a limit for child jails via the "children.cur" and "children.max"
parameters. This replaces the simple "allow.jails" permission. Approved by: bz (mentor)
Diffstat (limited to 'lib')
-rw-r--r--lib/libc/sys/jail.214
1 files changed, 7 insertions, 7 deletions
diff --git a/lib/libc/sys/jail.2 b/lib/libc/sys/jail.2
index 4b047bf..2e14f0d 100644
--- a/lib/libc/sys/jail.2
+++ b/lib/libc/sys/jail.2
@@ -25,7 +25,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd May 27, 2009
+.Dd June 23, 2009
.Dt JAIL 2
.Os
.Sh NAME
@@ -293,9 +293,9 @@ will fail if:
.Bl -tag -width Er
.It Bq Er EPERM
This process is not allowed to create a jail, either because it is not
-the super-user, or because it is in a jail where the
-.Va allow.jails
-parameter is not set.
+the super-user, or because it would exceed the jail's
+.Va children.max
+limit.
.It Bq Er EFAULT
.Fa jail
points to an address outside the allocated address space of the process.
@@ -312,9 +312,9 @@ will fail if:
.Bl -tag -width Er
.It Bq Er EPERM
This process is not allowed to create a jail, either because it is not
-the super-user, or because it is in a jail where the
-.Va allow.jails
-parameter is not set.
+the super-user, or because it would exceed the jail's
+.Va children.max
+limit.
.It Bq Er EPERM
A jail parameter was set to a less restrictive value then the current
environment.
OpenPOWER on IntegriCloud