| Commit message (Expand) | Author | Age | Files | Lines |
* | Implement functionality I called 'jail services'. | Pawel Jakub Dawidek | 2007-04-05 | 1 | -1/+19 |
* | Make prison_find() globally accessible. | Pawel Jakub Dawidek | 2007-04-05 | 1 | -0/+1 |
* | Add a new priv(9) kernel interface for checking the availability of | Robert Watson | 2006-11-06 | 1 | -0/+1 |
* | Rename sysctl security.jail.getfsstatroot_only to security.jail.enforce_statfs | Pawel Jakub Dawidek | 2005-06-09 | 1 | -1/+4 |
* | Make prison structure visible from userland if _WANT_PRISON is defined | Pawel Jakub Dawidek | 2005-03-20 | 1 | -1/+5 |
* | Add a new sysctl, "security.jail.chflags_allowed", which controls the | Colin Percival | 2005-02-08 | 1 | -0/+1 |
* | /* -> /*- for license, minor formatting changes | Warner Losh | 2005-01-07 | 1 | -1/+1 |
* | Correct mutexes names in comment. | Pawel Jakub Dawidek | 2004-11-24 | 1 | -2/+2 |
* | Give jail(8) the feature to allow raw sockets from within a | Bosko Milekic | 2004-04-26 | 1 | -0/+1 |
* | By default, when a process in jail calls getfsstat(), only return the | Robert Watson | 2004-02-14 | 1 | -0/+3 |
* | Defer the vrele() on a jail's root vnode reference from prison_free() | Robert Watson | 2004-01-23 | 1 | -1/+3 |
* | o In struct prison, add an allprison linked list of prisons (protected | Mike Barcroft | 2003-04-09 | 1 | -0/+20 |
* | Include <sys/queue.h> so that this file provides its own namespace | Bruce Evans | 2002-05-06 | 1 | -0/+1 |
* | Remove __P | Alfred Perlstein | 2002-03-19 | 1 | -10/+10 |
* | Make getcredhostname() take a buffer and the buffer's size | Robert Drehmel | 2002-02-27 | 1 | -1/+1 |
* | Add a function which returns the correct hostname for a given | Robert Drehmel | 2002-02-27 | 1 | -0/+1 |
* | o Introduce pr_mtx into struct prison, providing protection for the | Robert Watson | 2001-12-03 | 1 | -8/+17 |
* | o Introduce pr_securelevel, which holds a per-jail securelevel. | Robert Watson | 2001-09-26 | 1 | -0/+1 |
* | o Move per-process jail pointer (p->pr_prison) to inside of the subject | Robert Watson | 2001-02-21 | 1 | -1/+17 |
* | o Deny access to System V IPC from within jail by default, as in the | Robert Watson | 2000-10-31 | 1 | -0/+1 |
* | o Modify jail to limit creation of sockets to UNIX domain sockets, | Robert Watson | 2000-06-04 | 1 | -0/+1 |
* | Yet-another-update: rename ``kern.prison'' to a new sysctl root entry, | Robert Watson | 2000-02-12 | 1 | -1/+1 |
* | Fix sysctl namespace for jail: move the kern.jailcansethostname to | Robert Watson | 2000-02-10 | 1 | -0/+5 |
* | Change #ifdef KERNEL to #ifdef _KERNEL in the public headers. "KERNEL" | Peter Wemm | 1999-12-29 | 1 | -3/+3 |
* | Add a version number field to the jail(2) argument so that future changes | Poul-Henning Kamp | 1999-09-19 | 1 | -3/+4 |
* | $Id$ -> $FreeBSD$ | Peter Wemm | 1999-08-28 | 1 | -1/+1 |
* | Add sysctl variables for the Linuxulator. These reside under `compat.linux' as | Marcel Moolenaar | 1999-08-27 | 1 | -1/+2 |
* | $ brucify -deblunder | Poul-Henning Kamp | 1999-05-16 | 1 | -3/+7 |
* | This Implements the mumbled about "Jail" feature. | Poul-Henning Kamp | 1999-04-28 | 1 | -0/+41 |