summaryrefslogtreecommitdiffstats
path: root/usr.sbin/ypserv
diff options
context:
space:
mode:
authorbz <bz@FreeBSD.org>2009-12-13 13:57:32 +0000
committerbz <bz@FreeBSD.org>2009-12-13 13:57:32 +0000
commit932cbdbe4d3c405e08edd47627e620e9ad1b07d0 (patch)
tree8d2708fb3455d0829b95b1ddc69d4a072486bf2d /usr.sbin/ypserv
parent1ba3a5e4e0b1a21dd0c00df2e5223a60984e3de6 (diff)
downloadFreeBSD-src-932cbdbe4d3c405e08edd47627e620e9ad1b07d0.zip
FreeBSD-src-932cbdbe4d3c405e08edd47627e620e9ad1b07d0.tar.gz
Throughout the network stack we have a few places of
if (jailed(cred)) left. If you are running with a vnet (virtual network stack) those will return true and defer you to classic IP-jails handling and thus things will be "denied" or returned with an error. Work around this problem by introducing another "jailed()" function, jailed_without_vnet(), that also takes vnets into account, and permits the calls, should the jail from the given cred have its own virtual network stack. We cannot change the classic jailed() call to do that, as it is used outside the network stack as well. Discussed with: julian, zec, jamie, rwatson (back in Sept) MFC after: 5 days
Diffstat (limited to 'usr.sbin/ypserv')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud