| Commit message (Expand) | Author | Age | Files | Lines |
* | Remove AppleTalk support. | glebius | 2014-03-14 | 1 | -5/+0 |
* | Remove IPX support. | glebius | 2014-03-14 | 1 | -6/+0 |
* | Back out r261266 pending security buy-in. | jamie | 2014-01-31 | 1 | -25/+0 |
* | Add a jail parameter, allow.kmem, which lets jailed processes access | jamie | 2014-01-29 | 1 | -0/+25 |
* | Fix copy/paste typo. | ae | 2013-12-17 | 1 | -1/+1 |
* | jail_v0.ip_number was always in host byte order. This was handled | peter | 2013-11-28 | 1 | -1/+1 |
* | prison_check_ip4() can take const arguments. | glebius | 2013-11-01 | 1 | -3/+3 |
* | The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare | glebius | 2013-10-26 | 1 | -0/+1 |
* | Keep PRIV_KMEM_READ permitted inside jails as it is on the outside. | jamie | 2013-09-06 | 1 | -0/+7 |
* | Allow tmpfs be mounted inside jail. | delphij | 2013-08-23 | 1 | -0/+8 |
* | Refine the "nojail" rc keyword, adding "nojailvnet" for files that don't | jamie | 2013-05-19 | 1 | -0/+20 |
* | prison_racct_detach can be called for not fully initialized jail, so make it ... | mjg | 2012-12-18 | 1 | -0/+2 |
* | Remove the support for using non-mpsafe filesystem modules. | kib | 2012-10-22 | 1 | -21/+6 |
* | Fix use-after-free in kern_jail_set() triggered e.g. by attempts | trasz | 2012-05-22 | 1 | -6/+10 |
* | Don't leak locks in prison_racct_modify(). | trasz | 2012-05-22 | 1 | -1/+4 |
* | Make racct and rctl correctly handle jail renaming. Previously | trasz | 2012-03-06 | 1 | -8/+71 |
* | Add procfs to jail-mountable filesystems. | mm | 2012-02-29 | 1 | -0/+8 |
* | Analogous to r232059, add a parameter for the ZFS file system: | mm | 2012-02-26 | 1 | -4/+12 |
* | To improve control over the use of mount(8) inside a jail(8), introduce | mm | 2012-02-23 | 1 | -11/+26 |
* | Add support for mounting devfs inside jails. | mm | 2012-02-09 | 1 | -2/+55 |
* | Use separate buffer for global path to avoid overflow of path buffer. | mm | 2012-01-21 | 1 | -3/+11 |
* | Fix missing in r230129: | mm | 2012-01-15 | 1 | -0/+1 |
* | Introduce vn_path_to_global_path() | mm | 2012-01-15 | 1 | -19/+31 |
* | Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs. | ed | 2011-11-07 | 1 | -1/+1 |
* | Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs. | ed | 2011-11-07 | 1 | -1/+1 |
* | In order to maximize the re-usability of kernel code in user space this | kmacy | 2011-09-16 | 1 | -6/+6 |
* | Delay the recursive decrement of pr_uref when jails are made invisible | jamie | 2011-08-26 | 1 | -26/+5 |
* | Always disable mount and unmount for jails with enforce_statfs==2. | mm | 2011-08-02 | 1 | -1/+2 |
* | This update changes the mnt_flag field in the mount structure from | mckusick | 2011-07-24 | 1 | -2/+2 |
* | Add infrastructure to allow all frames/packets received on an interface | bz | 2011-07-03 | 1 | -0/+1 |
* | Change the way rctl interfaces with jails by introducing prison_racct | trasz | 2011-05-03 | 1 | -9/+107 |
* | Add rctl. It's used by racct to take user-configurable actions based | trasz | 2011-03-30 | 1 | -0/+4 |
* | Add racct. It's an API to keep per-process, per-jail, per-loginclass | trasz | 2011-03-29 | 1 | -0/+17 |
* | - Merge changes to the base system to support OFED. These include | jeff | 2011-03-21 | 1 | -1/+1 |
* | Add two new system calls, setloginclass(2) and getloginclass(2). This makes | trasz | 2011-03-05 | 1 | -0/+6 |
* | Add macro to test the sv_flags of any process. Change some places to test | dchagin | 2011-01-26 | 1 | -2/+2 |
* | Mfp4 CH177924: | bz | 2010-12-31 | 1 | -1/+8 |
* | Don't exit kern_jail_set without freeing options when enforce_statfs | jamie | 2010-09-10 | 1 | -5/+8 |
* | Back out r210974. Any convenience of not typing "persist" is outweighed | jamie | 2010-08-08 | 1 | -2/+6 |
* | Implicitly make a new jail persistent if it's set not to attach. | jamie | 2010-08-06 | 1 | -6/+2 |
* | Declare ip6 as (struct in6_addr *) instead of (struct in_addr *). This is | cperciva | 2010-06-04 | 1 | -1/+1 |
* | Provide groundwork for 32-bit binary compatibility on non-x86 platforms, | nwhitehorn | 2010-03-11 | 1 | -4/+4 |
* | Revised revision 199201 (add interface description capability as inspired | delphij | 2010-01-27 | 1 | -0/+1 |
* | Add ip4.saddrsel/ip4.nosaddrsel (and equivalent for ip6) to control | bz | 2010-01-17 | 1 | -2/+108 |
* | Change DDB show prison: | bz | 2010-01-11 | 1 | -5/+6 |
* | Adjust a comment to reflect reality, as we have proper source | bz | 2010-01-11 | 1 | -1/+3 |
* | (S)LIST_HEAD_INITIALIZER takes a (S)LIST_HEAD as an argument. | antoine | 2009-12-28 | 1 | -1/+1 |
* | Throughout the network stack we have a few places of | bz | 2009-12-13 | 1 | -1/+24 |
* | Revert revision 199201 for now as it has introduced a kernel vulnerability | delphij | 2009-11-12 | 1 | -1/+0 |
* | Add interface description capability as inspired by OpenBSD. | delphij | 2009-11-11 | 1 | -0/+1 |