Jamie Gritton
0e5c6bd436
Make it easier for filesystems to count themselves as jail-enabled, ...
by doing most of the work in a new function prison_add_vfs in kern_jail.c
Now a jail-enabled filesystem need only mark itself with VFCF_JAIL, and
the rest is taken care of. This includes adding a jail parameter like
allow.mount.foofs, and a sysctl like security.jail.mount_foofs_allowed.
Both of these used to be a static list of known filesystems, with
predefined permission bits.
Reviewed by: kib
Differential Revision: D14681
2018-05-04 20:54:27 +00:00
2018-05-04 04:05:07 +00:00
2018-05-04 19:28:05 +00:00
2018-05-01 17:32:43 +00:00
2018-05-01 21:42:27 +00:00
2018-05-04 20:54:27 +00:00
2018-05-04 20:54:27 +00:00
2018-05-04 19:31:28 +00:00
2018-05-01 19:17:38 +00:00
2018-03-29 04:02:50 +00:00
2018-04-17 15:44:05 +00:00
2018-05-04 18:59:01 +00:00
2018-05-04 14:38:48 +00:00
2018-05-04 20:54:27 +00:00
2018-03-06 14:28:37 +00:00
2018-05-04 00:34:27 +00:00
2018-04-20 19:37:08 +00:00
2018-05-03 21:37:46 +00:00
2018-03-11 20:13:15 +00:00
2018-05-04 20:54:27 +00:00
2018-02-14 00:12:03 +00:00
2018-02-26 18:23:36 +00:00
2018-05-01 17:32:43 +00:00
2018-05-03 19:45:48 +00:00
2018-05-04 18:57:05 +00:00
2018-03-30 18:50:13 +00:00
2018-02-23 18:15:50 +00:00
2018-05-04 09:28:12 +00:00
2018-05-02 22:11:16 +00:00
2018-04-26 12:23:31 +00:00
2018-05-02 15:59:15 +00:00
2018-01-22 02:08:10 +00:00
2018-04-11 17:28:24 +00:00
2018-01-25 22:25:13 +00:00
2018-02-10 01:09:22 +00:00
2018-03-27 20:51:49 +00:00
2018-04-19 15:24:21 +00:00
2018-05-04 04:00:48 +00:00
2018-04-17 18:04:28 +00:00
2018-03-30 18:50:13 +00:00
2018-05-02 15:59:15 +00:00
2018-05-04 20:54:27 +00:00
2018-04-08 19:23:50 +00:00
2018-03-24 21:30:24 +00:00
2018-04-05 00:32:01 +00:00
2018-05-04 17:17:30 +00:00
2018-05-03 21:45:59 +00:00
2018-05-02 10:19:17 +00:00
0e5c6bd436