aboutsummaryrefslogtreecommitdiff
path: root/sys/sys/jail.h
Commit message (Expand)AuthorAgeFilesLines
* jail: Handle a possible race between jail_remove(2) and fork(2)Jamie Gritton2021-02-161-0/+1
* jail: Use refcount(9) for prison references.Jamie Gritton2021-01-201-4/+5
* jail: Add prison_isvalid() and prison_isalive()Jamie Gritton2021-01-181-0/+2
* jail: Consistently handle the pr_allow bitmaskJamie Gritton2020-12-271-0/+1
* jail: Make comments on struct prison locking more preciseJamie Gritton2020-12-271-3/+5
* jail: introduce per jail suser_enabled settingMariusz Zaborski2020-11-181-1/+2
* Add __BEGIN_DECLS to jail.h to keep C++ happy.Jamie Gritton2020-08-291-0/+2
* ethersubr: Make the mac address generation more robustKristof Provost2020-04-181-0/+1
* Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki2020-02-261-2/+4
* Inline jailed().Mateusz Guzik2020-02-131-1/+6
* Split gigantic rtsock route_output() into smaller functions.Alexander V. Chernikov2019-12-311-1/+1
* In hardened systems, where the security.bsd.unprivileged_proc_debug sysctlJamie Gritton2018-11-271-1/+8
* Add a new jail permission, allow.read_msgbuf. When true, jailed processesJamie Gritton2018-10-171-1/+2
* Revert r337922, except for some documention-only bits. This needs to waitJamie Gritton2018-08-161-2/+11
* Put jail(2) under COMPAT_FREEBSD11. It has been the "old" way of creatingJamie Gritton2018-08-161-11/+2
* Add allow.mlock to jail parametersAntoine Brodin2018-07-291-1/+2
* Change prison_add_vfs() to the more generic prison_add_allow(), whichJamie Gritton2018-07-061-0/+2
* Make it easier for filesystems to count themselves as jail-enabled,Jamie Gritton2018-05-041-10/+7
* sys/sys: further adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-271-0/+2
* - Extend pr_allow flags visually to 32 bits, to make it more obvious at firs...Alexander Leidinger2017-07-091-17/+18
* Jails: Optionally prevent jailed root from binding to privileged portsAllan Jude2017-06-061-1/+2
* Move IPv4-specific jail functions to new file netinet/in_jail.cStephen J. Kiernan2016-08-091-1/+7
* Delay revmoing the last jail reference in prison_proc_free, and insteadJamie Gritton2016-04-271-2/+1
* Add a new jail OSD method, PR_METHOD_REMOVE. It's called when a jail isJamie Gritton2016-04-251-1/+2
* Remove the PR_REMOVE flag, which was meant as a temporary marker forJamie Gritton2016-04-251-1/+0
* Doh, commit in a wrong directory. Fix r290857.Edward Tomasz Napierala2015-11-151-1/+2
* Add support to the jail framework to be able to mount linsysfs(5) andMarcelo Araujo2015-07-191-1/+3
* Allow the kern.osrelease and kern.osreldate sysctl values to be set in aIan Lepore2015-02-271-1/+5
* Add allow.mount.fdescfs jail flag.Jamie Gritton2015-01-281-1/+2
* Remove the prison flags PR_IP4_DISABLE and PR_IP6_DISABLE, which have beenJamie Gritton2015-01-141-2/+0
* Back out r261266 pending security buy-in.Jamie Gritton2014-01-311-2/+1
* Add a jail parameter, allow.kmem, which lets jailed processes accessJamie Gritton2014-01-291-1/+2
* prison_check_ip4() can take const arguments.Gleb Smirnoff2013-11-011-1/+1
* Allow tmpfs be mounted inside jail.Xin LI2013-08-231-1/+2
* Add procfs to jail-mountable filesystems.Martin Matuska2012-02-291-1/+2
* Analogous to r232059, add a parameter for the ZFS file system:Martin Matuska2012-02-261-1/+2
* To improve control over the use of mount(8) inside a jail(8), introduceMartin Matuska2012-02-231-1/+5
* Add support for mounting devfs inside jails.Martin Matuska2012-02-091-1/+2
* Change the way rctl interfaces with jails by introducing prison_racctEdward Tomasz Napierala2011-05-031-1/+12
* Add racct. It's an API to keep per-process, per-jail, per-loginclassEdward Tomasz Napierala2011-03-291-1/+6
* - Merge changes to the base system to support OFED. These includeJeff Roberson2011-03-211-1/+1
* Add ip4.saddrsel/ip4.nosaddrsel (and equivalent for ip6) to controlBjoern A. Zeeb2010-01-171-0/+6
* Throughout the network stack we have a few places ofBjoern A. Zeeb2009-12-131-0/+1
* Make it possible to change the vnet sysctl variables on jailsBjoern A. Zeeb2009-08-131-0/+1
* Some jail parameters (in particular, "ip4" and "ip6" for IP addressJamie Gritton2009-07-251-7/+17
* Clean up struct prison, with the recent fields in more logical places,Jamie Gritton2009-06-241-13/+15
* Add a limit for child jails via the "children.cur" and "children.max"Jamie Gritton2009-06-231-4/+21
* Manage vnets via the jail system. If a jail is given the booleanJamie Gritton2009-06-151-0/+2
* Rename the host-related prison fields to be the same as the host.*Jamie Gritton2009-06-131-3/+3
* Add counterparts to getcredhostname:Jamie Gritton2009-06-131-1/+4