summaryrefslogtreecommitdiffstats
path: root/sys/kern/kern_jail.c
Commit message (Expand)AuthorAgeFilesLines
...
* Change the default value of the "ip4" and "ip6" jail parameters tojamie2009-07-291-27/+7
* Some jail parameters (in particular, "ip4" and "ip6" for IP addressjamie2009-07-251-35/+85
* Remove the interim vimage containers, struct vimage and struct procg,jamie2009-07-171-4/+0
* Wrap a PR_VNET inside "#ifdef VIMAGE" since that the only place it applies.jamie2009-06-241-0/+2
* In case of prisons with their own network stack, permitjamie2009-06-241-0/+128
* Add a limit for child jails via the "children.cur" and "children.max"jamie2009-06-231-9/+50
* Manage vnets via the jail system. If a jail is given the booleanjamie2009-06-151-0/+29
* Rename the host-related prison fields to be the same as the host.*jamie2009-06-131-29/+33
* Add counterparts to getcredhostname:jamie2009-06-131-1/+32
* Fix some overflow errors: a signed allocation and an insufficiantjamie2009-06-091-4/+12
* Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERICrwatson2009-06-051-1/+0
* Place hostnames and similar information fully under the prison system.jamie2009-05-291-16/+155
* Add hierarchical jails. A jail may further virtualize its environmentjamie2009-05-271-559/+1658
* Delay an error message until the variable it uses gets initialized.jamie2009-05-231-8/+6
* Introduce a new virtualization container, provisionally named vprocg, to holdzec2009-05-081-0/+4
* Move the per-prison Linux MIB from a private one-off pointer to the newjamie2009-05-071-1/+0
* Introduce the extensible jail framework, using the same "name=value"jamie2009-04-291-463/+1532
* Some non-functional changes: whitespace, KASSERT strings, declaration order.jamie2009-04-291-5/+5
* Whitespace/spelling fixes in advance of upcoming functional changes.jamie2009-03-271-12/+12
* Don't allow creating a socket with a protocol family that the currentjamie2009-02-051-0/+42
* Standardize the various prison_foo_ip[46] functions and prison_if tojamie2009-02-051-70/+74
* Mark most often used sysctl's as MPSAFE.ed2009-01-281-4/+6
* For consistency with prison_{local,remote,check}_ipN renamebz2009-01-251-2/+2
* Back out r186615; the sanitizing of the pointers in the error casebz2009-01-041-2/+0
* Added missing second part of cleaning j->ip[46] as requested by bzpho2008-12-301-0/+2
* Make sure that unused j->ip[46] are clearedpho2008-12-301-2/+4
* Correctly check the number of prison states to not access anythingbz2008-12-111-2/+2
* Unbreak the no-networks (no INET/6) build that I broke withbz2008-11-291-0/+2
* MFp4:bz2008-11-291-60/+848
* With the permissions of phk@ change the license on kern_jail.cbz2008-11-281-6/+22
* Update ZFS from version 6 to 13 and bring some FreeBSD-specific changes.pjd2008-11-171-234/+28
* Retire the MALLOC and FREE macros. They are an abomination unto style(9).des2008-10-231-6/+6
* Step 1.5 of importing the network stack virtualization infrastructurezec2008-10-021-0/+1
* Commit step 1 of the vimage project, (network stack)bz2008-08-171-1/+2
* MFp4 144659:bz2008-07-071-0/+4
* Introduce a new lock, hostname_mtx, and use it to synchronize accessrwatson2008-07-051-1/+4
* Revert rev. 178124 as requested by kris@. Having jail id not beingdelphij2008-06-191-18/+24
* Instead of rolling our own jail number allocation procedure, usedelphij2008-04-111-24/+18
* Add the support for the AT_FDCWD and fd-relative name lookups to thekib2008-03-311-0/+1
* Replace the last susers calls in netinet6/ with privilege checks.bz2008-01-241-0/+6
* VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used inattilio2008-01-131-3/+3
* vn_lock() is currently only used with the 'curthread' passed as argument.attilio2008-01-101-1/+1
* Merge first in a series of TrustedBSD MAC Framework KPI changesrwatson2007-10-241-1/+1
* Add PRIV_VFS_STAT privilege, which will allow overriding policy limits onrwatson2007-10-211-0/+1
* Fix jails and jail-friendly file systems handling:pjd2007-04-131-0/+1
* Allow PRIV_NETINET_REUSEPORT in jail.rwatson2007-04-101-1/+3
* prison_free() can be called with a mutex held. This wasn't a problem untilpjd2007-04-081-11/+16
* Only use prison mutex to protect the fields that need to be protected by it.pjd2007-04-081-2/+2
* pr_list is protected by the allprison_lock.pjd2007-04-081-1/+1
* Implement functionality I called 'jail services'.pjd2007-04-051-27/+244
OpenPOWER on IntegriCloud