| Commit message (Expand) | Author | Age | Files | Lines |
* | Refine the "nojail" rc keyword, adding "nojailvnet" for files that don't | Jamie Gritton | 2013-05-19 | 1 | -0/+20 |
* | prison_racct_detach can be called for not fully initialized jail, so make it ... | Mateusz Guzik | 2012-12-18 | 1 | -0/+2 |
* | Remove the support for using non-mpsafe filesystem modules. | Konstantin Belousov | 2012-10-22 | 1 | -21/+6 |
* | Fix use-after-free in kern_jail_set() triggered e.g. by attempts | Edward Tomasz Napierala | 2012-05-22 | 1 | -6/+10 |
* | Don't leak locks in prison_racct_modify(). | Edward Tomasz Napierala | 2012-05-22 | 1 | -1/+4 |
* | Make racct and rctl correctly handle jail renaming. Previously | Edward Tomasz Napierala | 2012-03-06 | 1 | -8/+71 |
* | Add procfs to jail-mountable filesystems. | Martin Matuska | 2012-02-29 | 1 | -0/+8 |
* | Analogous to r232059, add a parameter for the ZFS file system: | Martin Matuska | 2012-02-26 | 1 | -4/+12 |
* | To improve control over the use of mount(8) inside a jail(8), introduce | Martin Matuska | 2012-02-23 | 1 | -11/+26 |
* | Add support for mounting devfs inside jails. | Martin Matuska | 2012-02-09 | 1 | -2/+55 |
* | Use separate buffer for global path to avoid overflow of path buffer. | Martin Matuska | 2012-01-21 | 1 | -3/+11 |
* | Fix missing in r230129: | Martin Matuska | 2012-01-15 | 1 | -0/+1 |
* | Introduce vn_path_to_global_path() | Martin Matuska | 2012-01-15 | 1 | -19/+31 |
* | Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs. | Ed Schouten | 2011-11-07 | 1 | -1/+1 |
* | Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs. | Ed Schouten | 2011-11-07 | 1 | -1/+1 |
* | In order to maximize the re-usability of kernel code in user space this | Kip Macy | 2011-09-16 | 1 | -6/+6 |
* | Delay the recursive decrement of pr_uref when jails are made invisible | Jamie Gritton | 2011-08-26 | 1 | -26/+5 |
* | Always disable mount and unmount for jails with enforce_statfs==2. | Martin Matuska | 2011-08-02 | 1 | -1/+2 |
* | This update changes the mnt_flag field in the mount structure from | Kirk McKusick | 2011-07-24 | 1 | -2/+2 |
* | Add infrastructure to allow all frames/packets received on an interface | Bjoern A. Zeeb | 2011-07-03 | 1 | -0/+1 |
* | Change the way rctl interfaces with jails by introducing prison_racct | Edward Tomasz Napierala | 2011-05-03 | 1 | -9/+107 |
* | Add rctl. It's used by racct to take user-configurable actions based | Edward Tomasz Napierala | 2011-03-30 | 1 | -0/+4 |
* | Add racct. It's an API to keep per-process, per-jail, per-loginclass | Edward Tomasz Napierala | 2011-03-29 | 1 | -0/+17 |
* | - Merge changes to the base system to support OFED. These include | Jeff Roberson | 2011-03-21 | 1 | -1/+1 |
* | Add two new system calls, setloginclass(2) and getloginclass(2). This makes | Edward Tomasz Napierala | 2011-03-05 | 1 | -0/+6 |
* | Add macro to test the sv_flags of any process. Change some places to test | Dmitry Chagin | 2011-01-26 | 1 | -2/+2 |
* | Mfp4 CH177924: | Bjoern A. Zeeb | 2010-12-31 | 1 | -1/+8 |
* | Don't exit kern_jail_set without freeing options when enforce_statfs | Jamie Gritton | 2010-09-10 | 1 | -5/+8 |
* | Back out r210974. Any convenience of not typing "persist" is outweighed | Jamie Gritton | 2010-08-08 | 1 | -2/+6 |
* | Implicitly make a new jail persistent if it's set not to attach. | Jamie Gritton | 2010-08-06 | 1 | -6/+2 |
* | Declare ip6 as (struct in6_addr *) instead of (struct in_addr *). This is | Colin Percival | 2010-06-04 | 1 | -1/+1 |
* | Provide groundwork for 32-bit binary compatibility on non-x86 platforms, | Nathan Whitehorn | 2010-03-11 | 1 | -4/+4 |
* | Revised revision 199201 (add interface description capability as inspired | Xin LI | 2010-01-27 | 1 | -0/+1 |
* | Add ip4.saddrsel/ip4.nosaddrsel (and equivalent for ip6) to control | Bjoern A. Zeeb | 2010-01-17 | 1 | -2/+108 |
* | Change DDB show prison: | Bjoern A. Zeeb | 2010-01-11 | 1 | -5/+6 |
* | Adjust a comment to reflect reality, as we have proper source | Bjoern A. Zeeb | 2010-01-11 | 1 | -1/+3 |
* | (S)LIST_HEAD_INITIALIZER takes a (S)LIST_HEAD as an argument. | Antoine Brodin | 2009-12-28 | 1 | -1/+1 |
* | Throughout the network stack we have a few places of | Bjoern A. Zeeb | 2009-12-13 | 1 | -1/+24 |
* | Revert revision 199201 for now as it has introduced a kernel vulnerability | Xin LI | 2009-11-12 | 1 | -1/+0 |
* | Add interface description capability as inspired by OpenBSD. | Xin LI | 2009-11-11 | 1 | -0/+1 |
* | Revert previous commit and add myself to the list of people who should | Poul-Henning Kamp | 2009-09-08 | 1 | -1/+0 |
* | Add necessary include. | Poul-Henning Kamp | 2009-09-08 | 1 | -0/+1 |
* | Allow a jail's name to be the same as its jid (which is the default if no | Jamie Gritton | 2009-09-04 | 1 | -9/+20 |
* | Fix a LOR between allprison_lock and vnode locks by releasing | Jamie Gritton | 2009-08-27 | 1 | -2/+2 |
* | When "jail -c vnet" request fails, the current code actually creates and | Marko Zec | 2009-08-24 | 1 | -1/+1 |
* | Make it possible to change the vnet sysctl variables on jails | Bjoern A. Zeeb | 2009-08-13 | 1 | -0/+23 |
* | Make the kernel compile without IP networking by moving | Bjoern A. Zeeb | 2009-08-12 | 1 | -1/+2 |
* | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | Robert Watson | 2009-08-01 | 1 | -1/+4 |
* | Make the "enforce_statfs" default 2 (most restrictive) in jail_set(2), | Jamie Gritton | 2009-07-31 | 1 | -3/+4 |
* | Remove a LOR, where the the sleepable allprison_lock was being obtained | Jamie Gritton | 2009-07-30 | 1 | -309/+187 |