aboutsummaryrefslogtreecommitdiff
path: root/sys/kern/kern_jail.c
Commit message (Expand)AuthorAgeFilesLines
* Add macro to test the sv_flags of any process. Change some places to testDmitry Chagin2011-01-261-2/+2
* Mfp4 CH177924:Bjoern A. Zeeb2010-12-311-1/+8
* Don't exit kern_jail_set without freeing options when enforce_statfsJamie Gritton2010-09-101-5/+8
* Back out r210974. Any convenience of not typing "persist" is outweighedJamie Gritton2010-08-081-2/+6
* Implicitly make a new jail persistent if it's set not to attach.Jamie Gritton2010-08-061-6/+2
* Declare ip6 as (struct in6_addr *) instead of (struct in_addr *). This isColin Percival2010-06-041-1/+1
* Provide groundwork for 32-bit binary compatibility on non-x86 platforms,Nathan Whitehorn2010-03-111-4/+4
* Revised revision 199201 (add interface description capability as inspiredXin LI2010-01-271-0/+1
* Add ip4.saddrsel/ip4.nosaddrsel (and equivalent for ip6) to controlBjoern A. Zeeb2010-01-171-2/+108
* Change DDB show prison:Bjoern A. Zeeb2010-01-111-5/+6
* Adjust a comment to reflect reality, as we have proper sourceBjoern A. Zeeb2010-01-111-1/+3
* (S)LIST_HEAD_INITIALIZER takes a (S)LIST_HEAD as an argument.Antoine Brodin2009-12-281-1/+1
* Throughout the network stack we have a few places ofBjoern A. Zeeb2009-12-131-1/+24
* Revert revision 199201 for now as it has introduced a kernel vulnerabilityXin LI2009-11-121-1/+0
* Add interface description capability as inspired by OpenBSD.Xin LI2009-11-111-0/+1
* Revert previous commit and add myself to the list of people who shouldPoul-Henning Kamp2009-09-081-1/+0
* Add necessary include.Poul-Henning Kamp2009-09-081-0/+1
* Allow a jail's name to be the same as its jid (which is the default if noJamie Gritton2009-09-041-9/+20
* Fix a LOR between allprison_lock and vnode locks by releasingJamie Gritton2009-08-271-2/+2
* When "jail -c vnet" request fails, the current code actually creates andMarko Zec2009-08-241-1/+1
* Make it possible to change the vnet sysctl variables on jailsBjoern A. Zeeb2009-08-131-0/+23
* Make the kernel compile without IP networking by movingBjoern A. Zeeb2009-08-121-1/+2
* Merge the remainder of kern_vimage.c and vimage.h into vnet.c andRobert Watson2009-08-011-1/+4
* Make the "enforce_statfs" default 2 (most restrictive) in jail_set(2),Jamie Gritton2009-07-311-3/+4
* Remove a LOR, where the the sleepable allprison_lock was being obtainedJamie Gritton2009-07-301-309/+187
* Don't allow mixing the "vnet" and "ip4/6" jail parameters, since vnetJamie Gritton2009-07-291-11/+98
* Change the default value of the "ip4" and "ip6" jail parameters toJamie Gritton2009-07-291-27/+7
* Some jail parameters (in particular, "ip4" and "ip6" for IP addressJamie Gritton2009-07-251-35/+85
* Remove the interim vimage containers, struct vimage and struct procg,Jamie Gritton2009-07-171-4/+0
* Wrap a PR_VNET inside "#ifdef VIMAGE" since that the only place it applies.Jamie Gritton2009-06-241-0/+2
* In case of prisons with their own network stack, permitJamie Gritton2009-06-241-0/+128
* Add a limit for child jails via the "children.cur" and "children.max"Jamie Gritton2009-06-231-9/+50
* Manage vnets via the jail system. If a jail is given the booleanJamie Gritton2009-06-151-0/+29
* Rename the host-related prison fields to be the same as the host.*Jamie Gritton2009-06-131-29/+33
* Add counterparts to getcredhostname:Jamie Gritton2009-06-131-1/+32
* Fix some overflow errors: a signed allocation and an insufficiantJamie Gritton2009-06-091-4/+12
* Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERICRobert Watson2009-06-051-1/+0
* Place hostnames and similar information fully under the prison system.Jamie Gritton2009-05-291-16/+155
* Add hierarchical jails. A jail may further virtualize its environmentJamie Gritton2009-05-271-559/+1658
* Delay an error message until the variable it uses gets initialized.Jamie Gritton2009-05-231-8/+6
* Introduce a new virtualization container, provisionally named vprocg, to holdMarko Zec2009-05-081-0/+4
* Move the per-prison Linux MIB from a private one-off pointer to the newJamie Gritton2009-05-071-1/+0
* Introduce the extensible jail framework, using the same "name=value"Jamie Gritton2009-04-291-463/+1532
* Some non-functional changes: whitespace, KASSERT strings, declaration order.Jamie Gritton2009-04-291-5/+5
* Whitespace/spelling fixes in advance of upcoming functional changes.Jamie Gritton2009-03-271-12/+12
* Don't allow creating a socket with a protocol family that the currentJamie Gritton2009-02-051-0/+42
* Standardize the various prison_foo_ip[46] functions and prison_if toJamie Gritton2009-02-051-70/+74
* Mark most often used sysctl's as MPSAFE.Ed Schouten2009-01-281-4/+6
* For consistency with prison_{local,remote,check}_ipN renameBjoern A. Zeeb2009-01-251-2/+2
* Back out r186615; the sanitizing of the pointers in the error caseBjoern A. Zeeb2009-01-041-2/+0
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-24 00:22:26 +0000