Jamie Gritton 0e5c6bd436 Make it easier for filesystems to count themselves as jail-enabled,
by doing most of the work in a new function prison_add_vfs in kern_jail.c
Now a jail-enabled filesystem need only mark itself with VFCF_JAIL, and
the rest is taken care of.  This includes adding a jail parameter like
allow.mount.foofs, and a sysctl like security.jail.mount_foofs_allowed.
Both of these used to be a static list of known filesystems, with
predefined permission bits.

Reviewed by:	kib
Differential Revision:	D14681
2018-05-04 20:54:27 +00:00
..
2018-04-13 20:30:49 +00:00
2017-11-30 20:33:45 +00:00
2018-01-03 00:56:30 +00:00
2018-03-20 15:51:05 +00:00
2017-12-13 16:30:39 +00:00
2018-02-23 18:26:31 +00:00
2017-08-07 14:09:57 +00:00
2017-11-30 20:33:45 +00:00
2018-04-08 16:34:10 +00:00
2018-03-27 15:20:03 +00:00
2018-01-22 02:26:10 +00:00
2017-12-01 22:51:02 +00:00