diff options
| author | Olivier Certner <olce@FreeBSD.org> | 2024-07-03 14:30:19 +0000 |
|---|---|---|
| committer | Olivier Certner <olce@FreeBSD.org> | 2024-12-16 14:42:27 +0000 |
| commit | 5041b20503dbb442cc9ebd0a6e4db26905102c72 (patch) | |
| tree | b0f4b552dc5f5ae31f6f5411202a1c05fdc9855d | |
| parent | 90678c892d7b3a90339b7fc19fde16c64fe3cb70 (diff) | |
MAC: Define a common 'mac' node for MAC's jail parameters
To be used by MAC/do.
Reviewed by: jamie
Approved by: markj (mentor)
MFC after: 5 days
Relnotes: yes
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D46899
| -rw-r--r-- | sys/security/mac/mac_framework.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/sys/security/mac/mac_framework.c b/sys/security/mac/mac_framework.c index e290f837e297..d742b5dcbc3a 100644 --- a/sys/security/mac/mac_framework.c +++ b/sys/security/mac/mac_framework.c @@ -71,6 +71,7 @@ #include <sys/param.h> #include <sys/systm.h> #include <sys/condvar.h> +#include <sys/jail.h> #include <sys/kernel.h> #include <sys/lock.h> #include <sys/mac.h> @@ -105,6 +106,11 @@ SYSCTL_NODE(_security, OID_AUTO, mac, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, "TrustedBSD MAC policy controls"); /* + * Root sysctl node for MAC modules' jail parameters. + */ +SYSCTL_JAIL_PARAM_NODE(mac, "Jail parameters for MAC policy controls"); + +/* * Declare that the kernel provides a specific version of MAC support. * This permits modules to refuse to be loaded if the necessary support isn't * present, even if it's pre-boot. |