ed03776ca7
Several commits have added front end macros for the vnet macros to the NFS server, krpc and kgssapi. These macros are now null, but this patch changes them to front end the vnet macros. With this commit, many global variables in the code become vnet'd, so that nfsd(8), nfsuserd(8), rpc.tlsservd(8) and gssd(8) can run in a vnet prison, once enabled. To run the NFS server in a vnet prison still requires a couple of patches (in D37741 and D38371) that allow mountd(8) to export file systems from within a vnet prison. Once these are committed to main, a small patch to kern_jail.c allowing "allow.nfsd" without VNET_NFSD defined will allow the NFS server to run in a vnet prison. One area that still needs to be settled is cleanup when a prison is removed. Without this, everything should work except there will be a leak of malloc'd data and mutex locks when a vnet prison is removed. MFC after: 3 months |
||
---|---|---|
.. | ||
krb5 | ||
gss_accept_sec_context.c | ||
gss_acquire_cred.c | ||
gss_add_oid_set_member.c | ||
gss_canonicalize_name.c | ||
gss_create_empty_oid_set.c | ||
gss_delete_sec_context.c | ||
gss_display_status.c | ||
gss_export_name.c | ||
gss_get_mic.c | ||
gss_impl.c | ||
gss_import_name.c | ||
gss_init_sec_context.c | ||
gss_names.c | ||
gss_pname_to_uid.c | ||
gss_release_buffer.c | ||
gss_release_cred.c | ||
gss_release_name.c | ||
gss_release_oid_set.c | ||
gss_set_cred_option.c | ||
gss_test_oid_set_member.c | ||
gss_unwrap.c | ||
gss_verify_mic.c | ||
gss_wrap_size_limit.c | ||
gss_wrap.c | ||
gssapi_impl.h | ||
gssapi.h | ||
gssd_prot.c | ||
gssd.x | ||
gsstest.c | ||
kgss_if.m |