src/lib/libc/sys/jail.2, branch releng/14.0 FreeBSD source tree Remove $FreeBSD$: two-line nroff pattern 2023-08-16T17:55:10+00:00 Warner Losh imp@FreeBSD.org 2023-08-16T17:55:10+00:00 fa9896e082a1046ff4fbc75fcba4d18d1f2efc19 Remove /^\.\\"\n\.\\"\s*\$FreeBSD\$$\n/ 
Remove /^\.\\"\n\.\\"\s*\$FreeBSD\$$\n/
jail: Change both root and working directories in jail_attach(2) 2021-02-19T22:13:35+00:00 Jamie Gritton jamie@FreeBSD.org 2021-02-19T22:13:35+00:00 d4380c0cdd0517dc038403dd5c99242ce78bdeb5 jail_attach(2) performs an internal chroot operation, leaving it up to the calling process to assure the working directory is inside the jail. Add a matching internal chdir operation to the jail's root. Also ignore kern.chroot_allow_open_directories, and always disallow the operation if there are any directory descriptors open. Reported by: mjg Approved by: markj, kib MFC after: 3 days 
jail_attach(2) performs an internal chroot operation, leaving it up to
the calling process to assure the working directory is inside the jail.

Add a matching internal chdir operation to the jail's root.  Also
ignore kern.chroot_allow_open_directories, and always disallow the
operation if there are any directory descriptors open.

Reported by:    mjg
Approved by:    markj, kib
MFC after:      3 days
Revert r337922, except for some documention-only bits. This needs to wait 2018-08-16T19:09:43+00:00 Jamie Gritton jamie@FreeBSD.org 2018-08-16T19:09:43+00:00 c542c43ef1df2a13c059910afc58b49699cc72ea until user is changed to stop using jail(2). Differential Revision: D14791 
until user is changed to stop using jail(2).

Differential Revision:	D14791
Put jail(2) under COMPAT_FREEBSD11. It has been the "old" way of creating 2018-08-16T18:40:16+00:00 Jamie Gritton jamie@FreeBSD.org 2018-08-16T18:40:16+00:00 284001a222ae071c063920aa1c1b6477f168002d jails since FreeBSD 7. Along with the system call, put the various security.jail.allow_foo and security.jail.foo_allowed sysctls partly under COMPAT_FREEBSD11 (or BURN_BRIDGES). These sysctls had two disparate uses: on the system side, they were global permissions for jails created via jail(2) which lacked fine-grained permission controls; inside a jail, they're read-only descriptions of what the current jail is allowed to do. The first use is obsolete along with jail(2), but keep them for the second-read-only use. Differential Revision: D14791 
jails since FreeBSD 7.

Along with the system call, put the various security.jail.allow_foo and
security.jail.foo_allowed sysctls partly under COMPAT_FREEBSD11 (or
BURN_BRIDGES).  These sysctls had two disparate uses: on the system side,
they were global permissions for jails created via jail(2) which lacked
fine-grained permission controls; inside a jail, they're read-only
descriptions of what the current jail is allowed to do.  The first use
is obsolete along with jail(2), but keep them for the second-read-only use.

Differential Revision:	D14791
Mark jail(2), and the sysctls that it (and only it) uses as deprecated. 2016-05-30T05:21:24+00:00 Jamie Gritton jamie@FreeBSD.org 2016-05-30T05:21:24+00:00 ee8d6bd352e7fd23ede9349b939e051039a87d49 jail(8) has long used jail_set(2), and those sysctl only cause confusion. 
jail(8) has long used jail_set(2), and those sysctl only cause confusion.
Remove man page references to rndassociates.com, which has been taken over 2016-02-10T14:48:49+00:00 Jamie Gritton jamie@FreeBSD.org 2016-02-10T14:48:49+00:00 e94b881ba14eef3512d966581806309728527e84 by a domain squatter. 
by a domain squatter.
A new jail(8) with a configuration file, ultimately to replace the work 2012-04-26T17:36:05+00:00 Jamie Gritton jamie@FreeBSD.org 2012-04-26T17:36:05+00:00 91b24c185b9235d132d9ed7b94dedf1265add481 currently done by /etc/rc.d/jail. MFC after: 3 months 
currently done by /etc/rc.d/jail.

MFC after:	3 months
Remove trailing whitespace per mdoc lint warning 2012-03-29T05:02:12+00:00 Eitan Adler eadler@FreeBSD.org 2012-03-29T05:02:12+00:00 50d675f7a9fca2f3fba3a23ac41a8ae2c0162e4e Disussed with: gavin No objection from: doc Approved by: joel MFC after: 3 days 
Disussed with:	gavin
No objection from:	doc
Approved by:	joel
MFC after:	3 days
Globally replace u_int*_t from (non-contributed) man pages. 2012-02-12T18:29:56+00:00 Ed Schouten ed@FreeBSD.org 2012-02-12T18:29:56+00:00 6b99842ada7bb3bd24c5fd4541e046994733757b The reasoning behind this, is that if we are consistent in our documentation about the uint*_t stuff, people will be less tempted to write new code that uses the non-standard types. I am not going to bump the man page dates, as these changes can be considered style nits. The meaning of the man pages is unaffected. MFC after: 1 month 
The reasoning behind this, is that if we are consistent in our
documentation about the uint*_t stuff, people will be less tempted to
write new code that uses the non-standard types.

I am not going to bump the man page dates, as these changes can be
considered style nits. The meaning of the man pages is unaffected.

MFC after:	1 month
Acknowledge that jail_attach and jail_remove can return EPERM. 2012-02-08T23:34:47+00:00 Jamie Gritton jamie@FreeBSD.org 2012-02-08T23:34:47+00:00 e9d3a32ffdcd0279ba97723a3f3129cb46a9e968 MFC after: 1 week 
MFC after:	1 week