aboutsummaryrefslogtreecommitdiff
path: root/usr.sbin/jail/jail.8
diff options
context:
space:
mode:
authorJamie Gritton <jamie@FreeBSD.org>2009-05-29 21:27:12 +0000
committerJamie Gritton <jamie@FreeBSD.org>2009-05-29 21:27:12 +0000
commit76ca6f88dab430fe415094fb54beb7eaa010d22e (patch)
tree36c53629863ffb1eb32354e9a24549059dd6273f /usr.sbin/jail/jail.8
parent88812d9e1dfe430d3387fb39f958373f40b079f2 (diff)
downloadsrc-76ca6f88dab430fe415094fb54beb7eaa010d22e.tar.gz
src-76ca6f88dab430fe415094fb54beb7eaa010d22e.zip
Place hostnames and similar information fully under the prison system.
The system hostname is now stored in prison0, and the global variable "hostname" has been removed, as has the hostname_mtx mutex. Jails may have their own host information, or they may inherit it from the parent/system. The proper way to read the hostname is via getcredhostname(), which will copy either the hostname associated with the passed cred, or the system hostname if you pass NULL. The system hostname can still be accessed directly (and without locking) at prison0.pr_host, but that should be avoided where possible. The "similar information" referred to is domainname, hostid, and hostuuid, which have also become prison parameters and had their associated global variables removed. Approved by: bz (mentor)
Notes
Notes: svn path=/head/; revision=193066
Diffstat (limited to 'usr.sbin/jail/jail.8')
-rw-r--r--usr.sbin/jail/jail.822
1 files changed, 16 insertions, 6 deletions
diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8
index e6312074e4a2..a37a12234376 100644
--- a/usr.sbin/jail/jail.8
+++ b/usr.sbin/jail/jail.8
@@ -34,7 +34,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd May 27, 2009
+.Dd May 29, 2009
.Dt JAIL 8
.Os
.Sh NAME
@@ -263,7 +263,14 @@ A list of IPv6 addresses assigned to the prison, the counterpart to
above.
.It Va host.hostname
Hostname of the prison.
-If not specified, a jail will use the system hostname.
+Other similar parameters are
+.Va host.domainname ,
+.Va host.hostuuid
+and
+.Va host.hostid .
+Setting the boolean parameter
+.Va nohost
+will retain the system values of these settings.
.It Va securelevel
The value of the jail's
.Va kern.securelevel
@@ -737,13 +744,16 @@ The variable
determines how may address per address family a prison may have.
The default is 255.
.Pp
-There are currently two MIB variables that have per-jail settings.
+Some MIB variables have per-jail settings.
Changes to these variables by a jailed process do not effect the host
environment, only the jail environment.
-The variables are
-.Va kern.securelevel
+These variables are
+.Va kern.securelevel ,
+.Va kern.hostname ,
+.Va kern.domainname ,
+.Va kern.hostid ,
and
-.Va kern.hostname .
+.Va kern.hostuuid .
.Ss "Hierarchical Jails"
By setting a jail's
.Va allow.jails