52a510ace9
sysvmsg, sysvsem, and sysvshm, with the following bahavior: inherit: allow full access to the IPC primitives. This is the same as the current setup with allow.sysvipc is on. Jails and the base system can see (and moduly) each other's objects, which is generally considered a bad thing (though may be useful in some circumstances). disable: all no access, same as the current setup with allow.sysvipc off. new: A jail may see use the IPC objects that it has created. It also gets its own IPC key namespace, so different jails may have their own objects using the same key value. The parent jail (or base system) can see the jail's IPC objects, but not its keys. PR: 48471 Submitted by: based on work by kikuchan98@gmail.com MFC after: 5 days |
||
|---|---|---|
| .. | ||
| command.c | ||
| config.c | ||
| jail.8 | ||
| jail.c | ||
| jail.conf.5 | ||
| jaillex.l | ||
| jailp.h | ||
| jailparse.y | ||
| Makefile | ||
| Makefile.depend | ||
| state.c | ||