Pawel Jakub Dawidek f3a8d2f93c Add security.jail.mount_allowed sysctl, which allows to mount and ... unmount jail-friendly file systems from within a jail. Precisely it grants PRIV_VFS_MOUNT, PRIV_VFS_UNMOUNT and PRIV_VFS_MOUNT_NONUSER privileges for a jailed super-user. It is turned off by default. A jail-friendly file system is a file system which driver registers itself with VFCF_JAIL flag via VFS_SET(9) API. The lsvfs(1) command can be used to see which file systems are jail-friendly ones. There currently no jail-friendly file systems, ZFS will be the first one. In the future we may consider marking file systems like nullfs as jail-friendly. Reviewed by: rwatson		2007-04-05 21:03:05 +00:00
..
man1	Fix markup.	2006-12-26 22:25:58 +00:00
man3	Document that EPERM is returned when the calling thread does not have	2007-03-30 04:10:04 +00:00
man4	Kill whitespace at EOL.	2007-04-03 18:57:09 +00:00
man5	Add rpc_statd_flags and rpc_lockd_flags options to allow options to be	2007-04-04 13:16:18 +00:00
man6	- We don't install USD docs for games anymore since the games with docs	2005-11-29 17:11:09 +00:00
man7	- Remove the leading zero from the day of month.	2007-04-04 00:14:36 +00:00
man8	MFp4:	2006-12-27 13:22:41 +00:00
man9	Add security.jail.mount_allowed sysctl, which allows to mount and	2007-04-05 21:03:05 +00:00
Makefile	Reimplementation of world/kernel build options. For details, see:	2006-03-17 18:54:44 +00:00