summaryrefslogtreecommitdiff
path: root/sys/kern/kern_jail.c
Commit message (Expand)AuthorAgeFilesLines
* Refine the "nojail" rc keyword, adding "nojailvnet" for files that don'tJamie Gritton2013-05-191-0/+20
* prison_racct_detach can be called for not fully initialized jail, so make it ...Mateusz Guzik2012-12-181-0/+2
* Remove the support for using non-mpsafe filesystem modules.Konstantin Belousov2012-10-221-21/+6
* Fix use-after-free in kern_jail_set() triggered e.g. by attemptsEdward Tomasz Napierala2012-05-221-6/+10
* Don't leak locks in prison_racct_modify().Edward Tomasz Napierala2012-05-221-1/+4
* Make racct and rctl correctly handle jail renaming. PreviouslyEdward Tomasz Napierala2012-03-061-8/+71
* Add procfs to jail-mountable filesystems.Martin Matuska2012-02-291-0/+8
* Analogous to r232059, add a parameter for the ZFS file system:Martin Matuska2012-02-261-4/+12
* To improve control over the use of mount(8) inside a jail(8), introduceMartin Matuska2012-02-231-11/+26
* Add support for mounting devfs inside jails.Martin Matuska2012-02-091-2/+55
* Use separate buffer for global path to avoid overflow of path buffer.Martin Matuska2012-01-211-3/+11
* Fix missing in r230129:Martin Matuska2012-01-151-0/+1
* Introduce vn_path_to_global_path()Martin Matuska2012-01-151-19/+31
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten2011-11-071-1/+1
* Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.Ed Schouten2011-11-071-1/+1
* In order to maximize the re-usability of kernel code in user space thisKip Macy2011-09-161-6/+6
* Delay the recursive decrement of pr_uref when jails are made invisibleJamie Gritton2011-08-261-26/+5
* Always disable mount and unmount for jails with enforce_statfs==2.Martin Matuska2011-08-021-1/+2
* This update changes the mnt_flag field in the mount structure fromKirk McKusick2011-07-241-2/+2
* Add infrastructure to allow all frames/packets received on an interfaceBjoern A. Zeeb2011-07-031-0/+1
* Change the way rctl interfaces with jails by introducing prison_racctEdward Tomasz Napierala2011-05-031-9/+107
* Add rctl. It's used by racct to take user-configurable actions basedEdward Tomasz Napierala2011-03-301-0/+4
* Add racct. It's an API to keep per-process, per-jail, per-loginclassEdward Tomasz Napierala2011-03-291-0/+17
* - Merge changes to the base system to support OFED. These includeJeff Roberson2011-03-211-1/+1
* Add two new system calls, setloginclass(2) and getloginclass(2). This makesEdward Tomasz Napierala2011-03-051-0/+6
* Add macro to test the sv_flags of any process. Change some places to testDmitry Chagin2011-01-261-2/+2
* Mfp4 CH177924:Bjoern A. Zeeb2010-12-311-1/+8
* Don't exit kern_jail_set without freeing options when enforce_statfsJamie Gritton2010-09-101-5/+8
* Back out r210974. Any convenience of not typing "persist" is outweighedJamie Gritton2010-08-081-2/+6
* Implicitly make a new jail persistent if it's set not to attach.Jamie Gritton2010-08-061-6/+2
* Declare ip6 as (struct in6_addr *) instead of (struct in_addr *). This isColin Percival2010-06-041-1/+1
* Provide groundwork for 32-bit binary compatibility on non-x86 platforms,Nathan Whitehorn2010-03-111-4/+4
* Revised revision 199201 (add interface description capability as inspiredXin LI2010-01-271-0/+1
* Add ip4.saddrsel/ip4.nosaddrsel (and equivalent for ip6) to controlBjoern A. Zeeb2010-01-171-2/+108
* Change DDB show prison:Bjoern A. Zeeb2010-01-111-5/+6
* Adjust a comment to reflect reality, as we have proper sourceBjoern A. Zeeb2010-01-111-1/+3
* (S)LIST_HEAD_INITIALIZER takes a (S)LIST_HEAD as an argument.Antoine Brodin2009-12-281-1/+1
* Throughout the network stack we have a few places ofBjoern A. Zeeb2009-12-131-1/+24
* Revert revision 199201 for now as it has introduced a kernel vulnerabilityXin LI2009-11-121-1/+0
* Add interface description capability as inspired by OpenBSD.Xin LI2009-11-111-0/+1
* Revert previous commit and add myself to the list of people who shouldPoul-Henning Kamp2009-09-081-1/+0
* Add necessary include.Poul-Henning Kamp2009-09-081-0/+1
* Allow a jail's name to be the same as its jid (which is the default if noJamie Gritton2009-09-041-9/+20
* Fix a LOR between allprison_lock and vnode locks by releasingJamie Gritton2009-08-271-2/+2
* When "jail -c vnet" request fails, the current code actually creates andMarko Zec2009-08-241-1/+1
* Make it possible to change the vnet sysctl variables on jailsBjoern A. Zeeb2009-08-131-0/+23
* Make the kernel compile without IP networking by movingBjoern A. Zeeb2009-08-121-1/+2
* Merge the remainder of kern_vimage.c and vimage.h into vnet.c andRobert Watson2009-08-011-1/+4
* Make the "enforce_statfs" default 2 (most restrictive) in jail_set(2),Jamie Gritton2009-07-311-3/+4
* Remove a LOR, where the the sleepable allprison_lock was being obtainedJamie Gritton2009-07-301-309/+187