summaryrefslogtreecommitdiffstats
path: root/sys/kern/kern_jail.c
Commit message (Expand)AuthorAgeFilesLines
* Initialise pr_enforce_statfs from the "default" sysctl value andbz2015-06-171-1/+1
* Add kern.racct.enable tunable and RACCT_DISABLED config option.trasz2015-04-291-4/+18
* Do not include if_var.h and in6_var.h into kern_jail.c. It is now possibleglebius2015-03-241-4/+0
* cred: add proc_set_cred helpermjg2015-03-161-1/+1
* Format the line properly (wrap before column 80).ian2015-02-281-1/+2
* Export the new osreldate and osrelease jail parms in jail_get(2).ian2015-02-281-0/+6
* Allow the kern.osrelease and kern.osreldate sysctl values to be set in aian2015-02-271-2/+69
* Add allow.mount.fdescfs jail flag.jamie2015-01-281-0/+8
* Remove the prison flags PR_IP4_DISABLE and PR_IP6_DISABLE, which have beenjamie2015-01-141-18/+10
* Don't set prison's pr_ip4s or pr_ip6s to -1.jamie2015-01-141-2/+2
* Avoid unlocking unlocked mutex in RCTL jail code. Specific test casetrasz2014-09-091-2/+4
* Remove AppleTalk support.glebius2014-03-141-5/+0
* Remove IPX support.glebius2014-03-141-6/+0
* Back out r261266 pending security buy-in.jamie2014-01-311-25/+0
* Add a jail parameter, allow.kmem, which lets jailed processes accessjamie2014-01-291-0/+25
* Fix copy/paste typo.ae2013-12-171-1/+1
* jail_v0.ip_number was always in host byte order. This was handledpeter2013-11-281-1/+1
* prison_check_ip4() can take const arguments.glebius2013-11-011-3/+3
* The r48589 promised to remove implicit inclusion of if_var.h soon. Prepareglebius2013-10-261-0/+1
* Keep PRIV_KMEM_READ permitted inside jails as it is on the outside.jamie2013-09-061-0/+7
* Allow tmpfs be mounted inside jail.delphij2013-08-231-0/+8
* Refine the "nojail" rc keyword, adding "nojailvnet" for files that don'tjamie2013-05-191-0/+20
* prison_racct_detach can be called for not fully initialized jail, so make it ...mjg2012-12-181-0/+2
* Remove the support for using non-mpsafe filesystem modules.kib2012-10-221-21/+6
* Fix use-after-free in kern_jail_set() triggered e.g. by attemptstrasz2012-05-221-6/+10
* Don't leak locks in prison_racct_modify().trasz2012-05-221-1/+4
* Make racct and rctl correctly handle jail renaming. Previouslytrasz2012-03-061-8/+71
* Add procfs to jail-mountable filesystems.mm2012-02-291-0/+8
* Analogous to r232059, add a parameter for the ZFS file system:mm2012-02-261-4/+12
* To improve control over the use of mount(8) inside a jail(8), introducemm2012-02-231-11/+26
* Add support for mounting devfs inside jails.mm2012-02-091-2/+55
* Use separate buffer for global path to avoid overflow of path buffer.mm2012-01-211-3/+11
* Fix missing in r230129:mm2012-01-151-0/+1
* Introduce vn_path_to_global_path()mm2012-01-151-19/+31
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.ed2011-11-071-1/+1
* Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.ed2011-11-071-1/+1
* In order to maximize the re-usability of kernel code in user space thiskmacy2011-09-161-6/+6
* Delay the recursive decrement of pr_uref when jails are made invisiblejamie2011-08-261-26/+5
* Always disable mount and unmount for jails with enforce_statfs==2.mm2011-08-021-1/+2
* This update changes the mnt_flag field in the mount structure frommckusick2011-07-241-2/+2
* Add infrastructure to allow all frames/packets received on an interfacebz2011-07-031-0/+1
* Change the way rctl interfaces with jails by introducing prison_raccttrasz2011-05-031-9/+107
* Add rctl. It's used by racct to take user-configurable actions basedtrasz2011-03-301-0/+4
* Add racct. It's an API to keep per-process, per-jail, per-loginclasstrasz2011-03-291-0/+17
* - Merge changes to the base system to support OFED. These includejeff2011-03-211-1/+1
* Add two new system calls, setloginclass(2) and getloginclass(2). This makestrasz2011-03-051-0/+6
* Add macro to test the sv_flags of any process. Change some places to testdchagin2011-01-261-2/+2
* Mfp4 CH177924:bz2010-12-311-1/+8
* Don't exit kern_jail_set without freeing options when enforce_statfsjamie2010-09-101-5/+8
* Back out r210974. Any convenience of not typing "persist" is outweighedjamie2010-08-081-2/+6
OpenPOWER on IntegriCloud