Jamie Gritton 0e5c6bd436 Make it easier for filesystems to count themselves as jail-enabled,
by doing most of the work in a new function prison_add_vfs in kern_jail.c
Now a jail-enabled filesystem need only mark itself with VFCF_JAIL, and
the rest is taken care of.  This includes adding a jail parameter like
allow.mount.foofs, and a sysctl like security.jail.mount_foofs_allowed.
Both of these used to be a static list of known filesystems, with
predefined permission bits.

Reviewed by:	kib
Differential Revision:	D14681
2018-05-04 20:54:27 +00:00
..
2018-02-09 21:49:38 +00:00
2017-10-31 00:07:04 +00:00
2017-10-31 00:07:04 +00:00
2017-10-31 00:07:04 +00:00
2018-05-02 15:59:15 +00:00
2017-11-30 20:33:45 +00:00
2018-04-12 14:32:26 +00:00
2018-04-10 08:14:31 +00:00
2017-11-30 20:33:45 +00:00
2018-04-15 19:23:37 +00:00
2018-01-05 08:29:32 +00:00
2017-12-28 05:34:04 +00:00
2018-01-02 16:50:57 +00:00
2017-10-29 08:17:03 +00:00
2017-10-31 00:07:04 +00:00
2018-02-23 17:20:53 +00:00
2018-02-03 20:53:21 +00:00
2017-10-31 00:07:04 +00:00
2017-10-31 00:07:04 +00:00
2018-02-28 07:59:55 +00:00
2018-01-17 16:55:35 +00:00
2018-03-17 12:59:55 +00:00
2018-03-19 05:49:26 +00:00
2018-02-08 14:53:34 +00:00
2017-10-31 00:07:04 +00:00
2018-05-01 16:30:48 +00:00