d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
f737c45c91
freebsd-dev/sys
History
Christian S.J. Peron f737c45c91 Allow root in the host environment to open ptys within jailed environments. 
This logic change was introduced in revision 1.74:

Correct an oversight in jail() that allowed processes in jail to access
ptys in ways that might be unethical, especially towards processes not in
jail, or in other jails.

It should be fine to allow root in the host environment to do this. This
allows for more effective monitoring of prisons from the host environment.

Discussed with:	rwatson
MFC after:	1 week
2006-01-31 17:17:45 +00:00
..
alpha Move the old BSD4.3 tty compatibility from (!BURN_BRIDGES && COMPAT_43) 2006-01-10 09:19:10 +00:00
amd64 Call WITNESS_CHECK() in the page fault handler and immediately assume it 2006-01-27 22:22:10 +00:00
arm Try harder not to recurse. 2006-01-27 21:07:04 +00:00
boot Remove ELF dynamic tag definitions that aren't used. Ideally, 2006-01-18 18:49:25 +00:00
bsm
cam - Add a scsi_da.c and a umass.c quirk for Genesys 6-in-1 Card Reader. 2006-01-30 20:27:44 +00:00
coda Convert last four functions in coda_vnops.c to ANSI C function 2006-01-21 19:51:47 +00:00
compat - vn_lock with LK_RETRY can not return an error. The code that handled this 2006-01-30 08:22:56 +00:00
conf Add buffer corruption protection (RedZone) for kernel's malloc(9). 2006-01-31 11:09:21 +00:00
contrib fix a bug in the fragment cache (used for 'scrub fragment crop/drop-ovl', 2006-01-19 11:46:45 +00:00
crypto
ddb Fix -Wundef. 2005-12-04 02:12:43 +00:00
dev Add le(4), a driver for AMD Am7900 LANCE and Am79C9xx PCnet NICs ported 2006-01-31 14:48:58 +00:00
doc
fs - Remove a stale comment. This function was rewritten to be SMP safe some 2006-01-30 08:24:14 +00:00
gdb
geom Allow to specify only one disk. This is helpful when we want to extend 2006-01-30 22:47:07 +00:00
gnu Add marker vnodes to ensure that all vnodes associated with the mount point are 2006-01-09 20:42:19 +00:00
i4b Fix -Wundef warnings found when compiling i386 LINT, GENERIC and 2005-12-05 11:58:35 +00:00
i386 Prepare for sconfig(8) update. 2006-01-30 13:34:57 +00:00
ia64 s/DT_IA64_PLT_RESERVE/DT_IA_64_PLT_RESERVE/ 2006-01-28 17:58:22 +00:00
isa Tweak how the MD code calls the fooclock() methods some. Instead of 2005-12-22 22:16:09 +00:00
isofs/cd9660 I ran into an nfs client panic a couple of times in a row over the 2006-01-17 17:29:03 +00:00
kern Allow root in the host environment to open ptys within jailed environments. 2006-01-31 17:17:45 +00:00
libkern Convert function declarations to ANSI C. 2006-01-22 00:46:40 +00:00
modules Add makefile for ce(4) module. 2006-01-29 22:10:54 +00:00
net Set IFF_BROADCAST and IFF_MULTICAST on vlan interfaces from the 2006-01-31 16:41:05 +00:00
net80211 s/w beacon miss facility; need to add knobs to fiddle with the settings 2006-01-23 21:02:49 +00:00
netatalk - Store pointer to the link-level address right in "struct ifnet" 2005-11-11 16:04:59 +00:00
netatm Convert to ANSI C function declarations. 2006-01-22 01:07:11 +00:00
netgraph Fix module from panic. 2006-01-29 22:06:51 +00:00
netinet Add some initial locking to gif(4). It doesn't covers the whole driver, 2006-01-30 08:39:09 +00:00
netinet6 Add some initial locking to gif(4). It doesn't covers the whole driver, 2006-01-30 08:39:09 +00:00
netipsec Fix stack corruptions on amd64. 2006-01-21 10:44:34 +00:00
netipx In spx_attach() and spx_detach(), there is no need to check whether the 2006-01-14 00:05:44 +00:00
netkey Fix stack corruptions on amd64. 2006-01-21 10:44:34 +00:00
netnatm Use sparse initializers for "struct domain" and "struct protosw", 2005-11-09 13:29:16 +00:00
netncp In ncp_sysctl_connstat(), the SLIST_FOREACH() logic to check 'error' 2006-01-14 11:40:32 +00:00
netsmb Although we check the return value of copyin(9) while determaining how 2006-01-16 17:03:21 +00:00
nfs
nfs4client Use nfs4_disconnect for connections opened with nfs4_connect. 2006-01-19 22:48:31 +00:00
nfsclient Don't log an error on tcp connection reset, even if we don't get ECONNRESET. 2006-01-20 15:07:18 +00:00
nfsserver Manage the ucred for the NFS server using the crget/crfree API defined in 2006-01-28 19:24:40 +00:00
opencrypto
pc98 Move the old BSD4.3 tty compatibility from (!BURN_BRIDGES && COMPAT_43) 2006-01-10 09:19:10 +00:00
pccard I don't believe these are used at all, and can be safely removed 2006-01-15 06:49:28 +00:00
pci Check ifp before dereferencing it in xl_detach(). xl_detach() can be called 2006-01-18 09:42:21 +00:00
posix4 mqueue.h has been superceded by sys/mqueue.h thanks to David Xu's work. 2005-11-28 02:58:30 +00:00
powerpc Move the old BSD4.3 tty compatibility from (!BURN_BRIDGES && COMPAT_43) 2006-01-10 09:19:10 +00:00
rpc Fix up some cut-n-paste damage and some out-of-date comments. 2006-01-20 15:20:41 +00:00
security Fix potential overrun of static stack allocated array which stores 2006-01-15 01:02:20 +00:00
sparc64 o lsi64854_enet_intr(): 2006-01-31 12:50:02 +00:00
sys Merge the //depot/user/yar/vlan branch into CVS. It contains some collective 2006-01-30 13:45:15 +00:00
tools Fix a leftover "iwi_boot" string. 2006-01-30 16:32:08 +00:00
ufs Add marker vnodes to ensure that all vnodes associated with the mount point are 2006-01-09 20:42:19 +00:00
vm Add buffer corruption protection (RedZone) for kernel's malloc(9). 2006-01-31 11:09:21 +00:00
Makefile add nfsclient/, nfs4client/, and rpc/ directories to the 2006-01-10 20:58:27 +00:00