aboutsummaryrefslogtreecommitdiff
path: root/sys/sys/jail.h
Commit message (Expand)AuthorAgeFilesLines
* Change the way rctl interfaces with jails by introducing prison_racctEdward Tomasz Napierala2011-05-031-1/+12
* Add racct. It's an API to keep per-process, per-jail, per-loginclassEdward Tomasz Napierala2011-03-291-1/+6
* - Merge changes to the base system to support OFED. These includeJeff Roberson2011-03-211-1/+1
* Add ip4.saddrsel/ip4.nosaddrsel (and equivalent for ip6) to controlBjoern A. Zeeb2010-01-171-0/+6
* Throughout the network stack we have a few places ofBjoern A. Zeeb2009-12-131-0/+1
* Make it possible to change the vnet sysctl variables on jailsBjoern A. Zeeb2009-08-131-0/+1
* Some jail parameters (in particular, "ip4" and "ip6" for IP addressJamie Gritton2009-07-251-7/+17
* Clean up struct prison, with the recent fields in more logical places,Jamie Gritton2009-06-241-13/+15
* Add a limit for child jails via the "children.cur" and "children.max"Jamie Gritton2009-06-231-4/+21
* Manage vnets via the jail system. If a jail is given the booleanJamie Gritton2009-06-151-0/+2
* Rename the host-related prison fields to be the same as the host.*Jamie Gritton2009-06-131-3/+3
* Add counterparts to getcredhostname:Jamie Gritton2009-06-131-1/+4
* Place hostnames and similar information fully under the prison system.Jamie Gritton2009-05-291-0/+6
* Add support for the arbitrary named jail parameters used by jail_set(2)Jamie Gritton2009-05-271-13/+5
* Add hierarchical jails. A jail may further virtualize its environmentJamie Gritton2009-05-271-18/+97
* Move the per-prison Linux MIB from a private one-off pointer to the newJamie Gritton2009-05-071-1/+1
* Add a constant PR_MAXMETHOD to better define the jail/OSD interface.Jamie Gritton2009-05-051-0/+1
* Introduce the extensible jail framework, using the same "name=value"Jamie Gritton2009-04-291-11/+61
* With the permission of phk@ change the license on remaining jail codeJamie Gritton2009-04-291-6/+23
* Whitespace/spelling fixes in advance of upcoming functional changes.Jamie Gritton2009-03-271-6/+5
* Remove obsolete prison_service declarations.Jamie Gritton2009-02-171-16/+0
* Don't allow creating a socket with a protocol family that the currentJamie Gritton2009-02-051-0/+1
* For consistency with prison_{local,remote,check}_ipN renameBjoern A. Zeeb2009-01-251-2/+2
* MFp4:Bjoern A. Zeeb2008-11-291-7/+80
* Update ZFS from version 6 to 13 and bring some FreeBSD-specific changes.Pawel Jakub Dawidek2008-11-171-2/+7
* Revert rev. 178124 as requested by kris@. Having jail id not beingXin LI2008-06-191-0/+2
* Instead of rolling our own jail number allocation procedure, useXin LI2008-04-111-2/+0
* Implement functionality I called 'jail services'.Pawel Jakub Dawidek2007-04-051-1/+19
* Make prison_find() globally accessible.Pawel Jakub Dawidek2007-04-051-0/+1
* Add a new priv(9) kernel interface for checking the availability ofRobert Watson2006-11-061-0/+1
* Rename sysctl security.jail.getfsstatroot_only to security.jail.enforce_statfsPawel Jakub Dawidek2005-06-091-1/+4
* Make prison structure visible from userland if _WANT_PRISON is definedPawel Jakub Dawidek2005-03-201-1/+5
* Add a new sysctl, "security.jail.chflags_allowed", which controls theColin Percival2005-02-081-0/+1
* /* -> /*- for license, minor formatting changesWarner Losh2005-01-071-1/+1
* Correct mutexes names in comment.Pawel Jakub Dawidek2004-11-241-2/+2
* Give jail(8) the feature to allow raw sockets from within aBosko Milekic2004-04-261-0/+1
* By default, when a process in jail calls getfsstat(), only return theRobert Watson2004-02-141-0/+3
* Defer the vrele() on a jail's root vnode reference from prison_free()Robert Watson2004-01-231-1/+3
* o In struct prison, add an allprison linked list of prisons (protectedMike Barcroft2003-04-091-0/+20
* Include <sys/queue.h> so that this file provides its own namespaceBruce Evans2002-05-061-0/+1
* Remove __PAlfred Perlstein2002-03-191-10/+10
* Make getcredhostname() take a buffer and the buffer's sizeRobert Drehmel2002-02-271-1/+1
* Add a function which returns the correct hostname for a givenRobert Drehmel2002-02-271-0/+1
* o Introduce pr_mtx into struct prison, providing protection for theRobert Watson2001-12-031-8/+17
* o Introduce pr_securelevel, which holds a per-jail securelevel.Robert Watson2001-09-261-0/+1
* o Move per-process jail pointer (p->pr_prison) to inside of the subjectRobert Watson2001-02-211-1/+17
* o Deny access to System V IPC from within jail by default, as in theRobert Watson2000-10-311-0/+1
* o Modify jail to limit creation of sockets to UNIX domain sockets,Robert Watson2000-06-041-0/+1
* Yet-another-update: rename ``kern.prison'' to a new sysctl root entry,Robert Watson2000-02-121-1/+1
* Fix sysctl namespace for jail: move the kern.jailcansethostname toRobert Watson2000-02-101-0/+5