aboutsummaryrefslogtreecommitdiff
path: root/sys/sys/jail.h
Commit message (Expand)AuthorAgeFilesLines
* Move IPv4-specific jail functions to new file netinet/in_jail.cStephen J. Kiernan2016-08-091-1/+7
* Delay revmoing the last jail reference in prison_proc_free, and insteadJamie Gritton2016-04-271-2/+1
* Add a new jail OSD method, PR_METHOD_REMOVE. It's called when a jail isJamie Gritton2016-04-251-1/+2
* Remove the PR_REMOVE flag, which was meant as a temporary marker forJamie Gritton2016-04-251-1/+0
* Doh, commit in a wrong directory. Fix r290857.Edward Tomasz Napierala2015-11-151-1/+2
* Add support to the jail framework to be able to mount linsysfs(5) andMarcelo Araujo2015-07-191-1/+3
* Allow the kern.osrelease and kern.osreldate sysctl values to be set in aIan Lepore2015-02-271-1/+5
* Add allow.mount.fdescfs jail flag.Jamie Gritton2015-01-281-1/+2
* Remove the prison flags PR_IP4_DISABLE and PR_IP6_DISABLE, which have beenJamie Gritton2015-01-141-2/+0
* Back out r261266 pending security buy-in.Jamie Gritton2014-01-311-2/+1
* Add a jail parameter, allow.kmem, which lets jailed processes accessJamie Gritton2014-01-291-1/+2
* prison_check_ip4() can take const arguments.Gleb Smirnoff2013-11-011-1/+1
* Allow tmpfs be mounted inside jail.Xin LI2013-08-231-1/+2
* Add procfs to jail-mountable filesystems.Martin Matuska2012-02-291-1/+2
* Analogous to r232059, add a parameter for the ZFS file system:Martin Matuska2012-02-261-1/+2
* To improve control over the use of mount(8) inside a jail(8), introduceMartin Matuska2012-02-231-1/+5
* Add support for mounting devfs inside jails.Martin Matuska2012-02-091-1/+2
* Change the way rctl interfaces with jails by introducing prison_racctEdward Tomasz Napierala2011-05-031-1/+12
* Add racct. It's an API to keep per-process, per-jail, per-loginclassEdward Tomasz Napierala2011-03-291-1/+6
* - Merge changes to the base system to support OFED. These includeJeff Roberson2011-03-211-1/+1
* Add ip4.saddrsel/ip4.nosaddrsel (and equivalent for ip6) to controlBjoern A. Zeeb2010-01-171-0/+6
* Throughout the network stack we have a few places ofBjoern A. Zeeb2009-12-131-0/+1
* Make it possible to change the vnet sysctl variables on jailsBjoern A. Zeeb2009-08-131-0/+1
* Some jail parameters (in particular, "ip4" and "ip6" for IP addressJamie Gritton2009-07-251-7/+17
* Clean up struct prison, with the recent fields in more logical places,Jamie Gritton2009-06-241-13/+15
* Add a limit for child jails via the "children.cur" and "children.max"Jamie Gritton2009-06-231-4/+21
* Manage vnets via the jail system. If a jail is given the booleanJamie Gritton2009-06-151-0/+2
* Rename the host-related prison fields to be the same as the host.*Jamie Gritton2009-06-131-3/+3
* Add counterparts to getcredhostname:Jamie Gritton2009-06-131-1/+4
* Place hostnames and similar information fully under the prison system.Jamie Gritton2009-05-291-0/+6
* Add support for the arbitrary named jail parameters used by jail_set(2)Jamie Gritton2009-05-271-13/+5
* Add hierarchical jails. A jail may further virtualize its environmentJamie Gritton2009-05-271-18/+97
* Move the per-prison Linux MIB from a private one-off pointer to the newJamie Gritton2009-05-071-1/+1
* Add a constant PR_MAXMETHOD to better define the jail/OSD interface.Jamie Gritton2009-05-051-0/+1
* Introduce the extensible jail framework, using the same "name=value"Jamie Gritton2009-04-291-11/+61
* With the permission of phk@ change the license on remaining jail codeJamie Gritton2009-04-291-6/+23
* Whitespace/spelling fixes in advance of upcoming functional changes.Jamie Gritton2009-03-271-6/+5
* Remove obsolete prison_service declarations.Jamie Gritton2009-02-171-16/+0
* Don't allow creating a socket with a protocol family that the currentJamie Gritton2009-02-051-0/+1
* For consistency with prison_{local,remote,check}_ipN renameBjoern A. Zeeb2009-01-251-2/+2
* MFp4:Bjoern A. Zeeb2008-11-291-7/+80
* Update ZFS from version 6 to 13 and bring some FreeBSD-specific changes.Pawel Jakub Dawidek2008-11-171-2/+7
* Revert rev. 178124 as requested by kris@. Having jail id not beingXin LI2008-06-191-0/+2
* Instead of rolling our own jail number allocation procedure, useXin LI2008-04-111-2/+0
* Implement functionality I called 'jail services'.Pawel Jakub Dawidek2007-04-051-1/+19
* Make prison_find() globally accessible.Pawel Jakub Dawidek2007-04-051-0/+1
* Add a new priv(9) kernel interface for checking the availability ofRobert Watson2006-11-061-0/+1
* Rename sysctl security.jail.getfsstatroot_only to security.jail.enforce_statfsPawel Jakub Dawidek2005-06-091-1/+4
* Make prison structure visible from userland if _WANT_PRISON is definedPawel Jakub Dawidek2005-03-201-1/+5
* Add a new sysctl, "security.jail.chflags_allowed", which controls theColin Percival2005-02-081-0/+1