src/lib/libc/sys/jail.2, branch releng/12.4FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=releng%2F12.42021-02-22T19:02:21ZMFC jail: Change both root and working directories in jail_attach(2)2021-02-22T19:02:21ZJamie Grittonjamie@FreeBSD.org2021-02-19T22:13:35Zurn:sha1:ca9ab8ea17748a1758701fde262cb272fb757989
jail_attach(2) performs an internal chroot operation, leaving it up to
the calling process to assure the working directory is inside the jail.
Add a matching internal chdir operation to the jail's root. Also
ignore kern.chroot_allow_open_directories, and always disallow the
operation if there are any directory descriptors open.
Reported by: mjg
Approved by: markj, kib
(cherry picked from commit d4380c0cdd0517dc038403dd5c99242ce78bdeb5)
Revert r337922, except for some documention-only bits. This needs to wait2018-08-16T19:09:43ZJamie Grittonjamie@FreeBSD.org2018-08-16T19:09:43Zurn:sha1:c542c43ef1df2a13c059910afc58b49699cc72ea
until user is changed to stop using jail(2).
Differential Revision: D14791
Put jail(2) under COMPAT_FREEBSD11. It has been the "old" way of creating2018-08-16T18:40:16ZJamie Grittonjamie@FreeBSD.org2018-08-16T18:40:16Zurn:sha1:284001a222ae071c063920aa1c1b6477f168002d
jails since FreeBSD 7.
Along with the system call, put the various security.jail.allow_foo and
security.jail.foo_allowed sysctls partly under COMPAT_FREEBSD11 (or
BURN_BRIDGES). These sysctls had two disparate uses: on the system side,
they were global permissions for jails created via jail(2) which lacked
fine-grained permission controls; inside a jail, they're read-only
descriptions of what the current jail is allowed to do. The first use
is obsolete along with jail(2), but keep them for the second-read-only use.
Differential Revision: D14791
Mark jail(2), and the sysctls that it (and only it) uses as deprecated.2016-05-30T05:21:24ZJamie Grittonjamie@FreeBSD.org2016-05-30T05:21:24Zurn:sha1:ee8d6bd352e7fd23ede9349b939e051039a87d49
jail(8) has long used jail_set(2), and those sysctl only cause confusion.
Remove man page references to rndassociates.com, which has been taken over2016-02-10T14:48:49ZJamie Grittonjamie@FreeBSD.org2016-02-10T14:48:49Zurn:sha1:e94b881ba14eef3512d966581806309728527e84
by a domain squatter.
A new jail(8) with a configuration file, ultimately to replace the work2012-04-26T17:36:05ZJamie Grittonjamie@FreeBSD.org2012-04-26T17:36:05Zurn:sha1:91b24c185b9235d132d9ed7b94dedf1265add481
currently done by /etc/rc.d/jail.
MFC after: 3 months
Remove trailing whitespace per mdoc lint warning2012-03-29T05:02:12ZEitan Adlereadler@FreeBSD.org2012-03-29T05:02:12Zurn:sha1:50d675f7a9fca2f3fba3a23ac41a8ae2c0162e4e
Disussed with: gavin
No objection from: doc
Approved by: joel
MFC after: 3 days
Globally replace u_int*_t from (non-contributed) man pages.2012-02-12T18:29:56ZEd Schoutened@FreeBSD.org2012-02-12T18:29:56Zurn:sha1:6b99842ada7bb3bd24c5fd4541e046994733757b
The reasoning behind this, is that if we are consistent in our
documentation about the uint*_t stuff, people will be less tempted to
write new code that uses the non-standard types.
I am not going to bump the man page dates, as these changes can be
considered style nits. The meaning of the man pages is unaffected.
MFC after: 1 month
Acknowledge that jail_attach and jail_remove can return EPERM.2012-02-08T23:34:47ZJamie Grittonjamie@FreeBSD.org2012-02-08T23:34:47Zurn:sha1:e9d3a32ffdcd0279ba97723a3f3129cb46a9e968
MFC after: 1 week
Remove a section that went to jail(8), and fix a small grammar error.2010-10-20T21:19:36ZJamie Grittonjamie@FreeBSD.org2010-10-20T21:19:36Zurn:sha1:40229872e419203c67c100cf14a71618baeacea4