aboutsummaryrefslogtreecommitdiff
path: root/release/Makefile
diff options
context:
space:
mode:
authorRobert Watson <rwatson@FreeBSD.org>2000-06-04 04:28:31 +0000
committerRobert Watson <rwatson@FreeBSD.org>2000-06-04 04:28:31 +0000
commit7cadc2663e77373c6aa646c06f75cb7705329842 (patch)
tree19aa5bf4a1f35db5b690dbfdd07f864a1436a12d /release/Makefile
parenta6cb9949a731955ca4a27553ae714ca42fa187ee (diff)
downloadsrc-7cadc2663e77373c6aa646c06f75cb7705329842.tar.gz
src-7cadc2663e77373c6aa646c06f75cb7705329842.zip
o Modify jail to limit creation of sockets to UNIX domain sockets,
TCP/IP (v4) sockets, and routing sockets. Previously, interaction with IPv6 was not well-defined, and might be inappropriate for some environments. Similarly, sysctl MIB entries providing interface information also give out only addresses from those protocol domains. For the time being, this functionality is enabled by default, and toggleable using the sysctl variable jail.socket_unixiproute_only. In the future, protocol domains will be able to determine whether or not they are ``jail aware''. o Further limitations on process use of getpriority() and setpriority() by jailed processes. Addresses problem described in kern/17878. Reviewed by: phk, jmg
Notes
Notes: svn path=/head/; revision=61235
Diffstat (limited to 'release/Makefile')
0 files changed, 0 insertions, 0 deletions