by doing most of the work in a new function prison_add_vfs in kern_jail.c Now a jail-enabled filesystem need only mark itself with VFCF_JAIL, and the rest is taken care of. This includes adding a jail parameter like allow.mount.foofs, and a sysctl like security.jail.mount_foofs_allowed. Both of these used to be a static list of known filesystems, with predefined permission bits. Reviewed by: kib Differential Revision: D14681 |
||
---|---|---|
.. | ||
procfs_dbregs.c | ||
procfs_fpregs.c | ||
procfs_ioctl.c | ||
procfs_map.c | ||
procfs_mem.c | ||
procfs_note.c | ||
procfs_osrel.c | ||
procfs_regs.c | ||
procfs_rlimit.c | ||
procfs_status.c | ||
procfs_type.c | ||
procfs.c | ||
procfs.h |