aboutsummaryrefslogtreecommitdiff
path: root/usr.sbin/jail
Commit message (Collapse)AuthorAgeFilesLines
* Pass an array of gid_t rather than an array of int to getgroups().Stefan Farfeleder2004-10-021-1/+2
| | | | | | | PR: 56646 Notes: svn path=/head/; revision=136051
* o Add -l option to jail(8) similar to su(1): before running jail'edMaxim Konovalov2004-08-152-6/+50
| | | | | | | | | | | | program under specific user's credentials, clean the environment and set only a few variables. PR: bin/70024 Submitted by: demon MFC after: 1 month Notes: svn path=/head/; revision=133743
* Mechanically kill hard sentence breaks.Ruslan Ermilov2004-07-021-2/+4
| | | | Notes: svn path=/head/; revision=131500
* Prepare jail(8) utility for new functionality which will limitPawel Jakub Dawidek2004-06-271-4/+6
| | | | | | | | | seeing status of mounted file system for jailed processes. Pass full path of jail's root directory to the kernel. mount(8) utility is doing the same thing already. Notes: svn path=/head/; revision=131182
* Markup nits.Ruslan Ermilov2004-06-051-7/+11
| | | | Notes: svn path=/head/; revision=130136
* Sentences should not start with conjunctions. Change "Because"Christian S.J. Peron2004-06-011-2/+2
| | | | | | | | | to "Since". Pointed out by: Ceri Notes: svn path=/head/; revision=129966
* Add a warning note to security.jail.allow_raw_socketsChristian S.J. Peron2004-06-011-1/+4
| | | | | | | | | | | | | | | | | | about the risks of enabling raw sockets in prisons. Because raw sockets can be used to configure and interact with various network subsystems, extra caution should be used where privileged access to jails is given out to untrusted parties. As such, by default this option is disabled. A few others and I are currently auditing the kernel source code to ensure that the use of raw sockets by privledged prison users is safe. Approved by: bmilekic (mentor) Notes: svn path=/head/; revision=129909
* o Implement -U flag: run command as user which exists only in jail.Maxim Konovalov2004-05-292-19/+40
| | | | | | | | | | | | o getpwnam(3) returns NULL and does not set errno when the user does not exist. Bail out with "no such user" instead of "Unknown error: 0". PR: bin/67262 Submitted by: demon (-U flag) MFC after: 3 weeks Notes: svn path=/head/; revision=129848
* Typos and nits.Daniel Harris2004-05-201-19/+19
| | | | Notes: svn path=/head/; revision=129466
* Document security.jail.getfsstatroot_only sysctl.Pawel Jakub Dawidek2004-05-201-0/+14
| | | | | | | | Obtained from: rwatson's commit log Approved by: rwatson Notes: svn path=/head/; revision=129463
* mdoc(7) cleanup for the last commit to this file.Simon L. B. Nielsen2004-05-041-3/+10
| | | | | | | OK'ed by: bmilekic Notes: svn path=/head/; revision=128923
* Ammend jail(8) man page to explain new sysctl for raw-socketsBosko Milekic2004-05-031-0/+7
| | | | | | | | | inside jails, Christian's last submission. Submitted by: Christian S.J. Peron <maneo@bsdpro.com> Notes: svn path=/head/; revision=128890
* Correct typo.Lukas Ertl2004-02-061-1/+1
| | | | Notes: svn path=/head/; revision=125532
* A variety of content cleanups:Robert Watson2003-11-201-22/+70
| | | | | | | | | | | | | | | | | | | | | | | | | | (1) Document the notion of using jail(8) to run "virtual servers" or just to constrain specific applications. If only running specific applications, some configuration steps are unnecessary (such as editing rc.conf). (2) Add some more subsection headers to break up the bigger chunks of text. (3) Clarify the problems associated with applications binding all IP addresses in the host, and attempt to be more specific about potential application problems. Document how to force sshd to bind the the right socket. (4) Suggest that in a jailed application scenario, you might want to have the host syslogd listen on the socket in the jail, rather than running syslogd in the jail. (5) Catch another reference to /stand/sysinstall. Approved by: re (bmah implicitly) Notes: svn path=/head/; revision=122910
* No need to copy sysinstall into a jail with -CURRENT, since inRobert Watson2003-11-201-10/+2
| | | | | | | | | -CURRENT, we have /usr/sbin/sysinstall. Approved by: re (bmah implicitly) Notes: svn path=/head/; revision=122909
* - Add a note that there are two MIB variables that have per-jailKen Smith2003-11-111-0/+8
| | | | | | | | | | settings. Reviewed by: rwatson Approved by: blackend (mentor) Notes: svn path=/head/; revision=122505
* add FBSDIDPhilippe Charnier2003-07-061-3/+3
| | | | Notes: svn path=/head/; revision=117280
* When pointing users at mount_devfs to populate the /dev of a jail,Robert Watson2003-06-261-0/+10
| | | | | | | | | | tell them that they also need to use devfs rules to prevent inappropriate devices from appearing in the jail; add an Xref. In earlier versions of this man page, the user was instructed to use sh MAKEDEV jail, which only created a minimal set of device nodes. Notes: svn path=/head/; revision=116889
* Force output of jail ID (if necessary) before excuting the command,Mike Barcroft2003-04-211-1/+3
| | | | | | | | otherwise redirection of stdout to a file using block buffering will not complete in time. Notes: svn path=/head/; revision=113804
* o Add jls(8) for listing active jails.Mike Barcroft2003-04-092-20/+35
| | | | | | | | | | o Add jexec(8) to execute a command in an existing jail. o Add -j option for killall(1) to kill all processes in a specified jail. o Add -i option to jail(8) to output jail ID of newly created jail. Notes: svn path=/head/; revision=113277
* Free login_cap(3) resources after usage.Maxim Konovalov2003-04-071-0/+1
| | | | | | | Submitted by: demon Notes: svn path=/head/; revision=113206
* o Fix error messages formatting, style.Maxim Konovalov2003-04-021-29/+22
| | | | | | | | Prodded by: bde Reviewed by: bde Notes: svn path=/head/; revision=112972
* o Add -u <username> flag to jail(8): set user context before exec.Maxim Konovalov2003-03-273-12/+84
| | | | | | | | | | PR: bin/44320 Submitted by: Mike Matsnev <mike@po.cs.msu.su> Reviewed by: -current MFC after: 6 weeks Notes: svn path=/head/; revision=112705
* portmap_enable -> rpcbind_enable.Maxim Konovalov2003-03-181-2/+2
| | | | | | | Spotted by: Andrew Khlebutin <andreyh@perm.ru> Notes: svn path=/head/; revision=112376
* Remove traces of MAKEDEV & add xref to mount_devfs(8).Giorgos Keramidas2003-02-281-2/+2
| | | | | | | | | | DEVFS is now mandatory in CURRENT. PR: docs/48095 Submitted by: Grzegorz Czaplinski <G.Czaplinski@prioris.mini.pw.edu.pl> Notes: svn path=/head/; revision=111688
* Fix example, we do not need NO_MAKEDEV_RUN any more.Poul-Henning Kamp2002-10-221-1/+1
| | | | | | | XXX: this example should be updated with a good example of devfs(8) rules. Notes: svn path=/head/; revision=105704
* The .Nm utilityPhilippe Charnier2002-07-141-2/+2
| | | | Notes: svn path=/head/; revision=99968
* Fix IP address typo.Dima Dorfman2002-05-201-1/+1
| | | | | | | | PR: 38313 Submitted by: Jeff Ito <jeffi@rcn.com> Notes: svn path=/head/; revision=96979
* Usage style sweep: spell "usage" with a small 'u'.Dag-Erling Smørgrav2002-04-221-1/+1
| | | | | | | | Also change one case of blatant __progname abuse (several more remain) This commit does not touch anything in src/{contrib,crypto,gnu}/. Notes: svn path=/head/; revision=95258
* - Attempt to help declutter kern. sysctl by moving security out fromAndrew R. Reiter2002-01-161-6/+6
| | | | | | | | | beneath it. Reviewed by: rwatson Notes: svn path=/head/; revision=89414
* mdoc(7) police: ispell rev. 1.32.Ruslan Ermilov2002-01-101-1/+1
| | | | Notes: svn path=/head/; revision=89216
* mdoc(7) police: tidy up previous delta.Ruslan Ermilov2002-01-101-3/+9
| | | | Notes: svn path=/head/; revision=89215
* Add some wisdom to the jail setup instructions.Poul-Henning Kamp2001-12-141-1/+11
| | | | Notes: svn path=/head/; revision=87943
* mdoc(7) police overhaul.Ruslan Ermilov2001-12-141-118/+155
| | | | Notes: svn path=/head/; revision=87863
* - Update the sysctl mibs in order to reflect the recent kern_jail.cAndrew R. Reiter2001-12-121-9/+9
| | | | | | | | | | changes. Approved by: rwatson Reviewed by: rwatson Notes: svn path=/head/; revision=87717
* syslogd can now be configured to bind to a specific address.Dima Dorfman2001-09-031-5/+2
| | | | Notes: svn path=/head/; revision=82874
* This is not jail(2), or anything else suitable to be referenced with .Fn.Dima Dorfman2001-08-271-2/+2
| | | | Notes: svn path=/head/; revision=82417
* Perform a major cleanup of the usr.sbin Makefiles.David E. O'Brien2001-07-201-2/+3
| | | | | | | | These are not perfectly in agreement with each other style-wise, but they are orders of orders of magnitude more consistent style-wise than before. Notes: svn path=/head/; revision=80029
* Remove whitespace at EOL.Dima Dorfman2001-07-151-2/+2
| | | | Notes: svn path=/head/; revision=79755
* mdoc(7) police: removed HISTORY info from the .Os call.Ruslan Ermilov2001-07-101-1/+1
| | | | Notes: svn path=/head/; revision=79537
* mdoc(7) police: sort xrefs.Ruslan Ermilov2001-07-051-1/+1
| | | | Notes: svn path=/head/; revision=79293
* Set WARNS=2 on programs that compile cleanly with it; add $FreeBSD$Dima Dorfman2001-06-301-0/+1
| | | | | | | | | where necessary. Submitted by: Mike Barcroft <mike@q9media.com> Notes: svn path=/head/; revision=79011
* Add missing includes and sort includes.Dima Dorfman2001-06-241-4/+8
| | | | Notes: svn path=/head/; revision=78723
* Include missing header files which define functions for which gcc hasDima Dorfman2001-06-241-0/+2
| | | | | | | builtints (e.g., exit, strcmp). Notes: svn path=/head/; revision=78720
* Correct cross-reference:Maxim Sobolev2001-06-071-2/+2
| | | | | | | | | portmap.8 --> rpcbind.8 Submitted by: .Xr testing script Notes: svn path=/head/; revision=77878
* Change NO_MAKEDEV to a finer granularity method:Jeroen Ruigrok van der Werven2001-03-291-1/+1
| | | | | | | | | | | | NO_MAKEDEV_INSTALL and NO_MAKEDEV_RUN. The former implying the latter. The names imply what they do. The last commit by DES based on a PR defeated the original idea behind NO_MAKEDEV, which was not to run MAKEDEV, but to do the installation of MAKEDEV. This should satisfy both parties on the MAKEDEV challenge. Reflect this in the documentation. Notes: svn path=/head/; revision=74991
* - Backout botched attempt to introduce MANSECT feature.Ruslan Ermilov2001-03-261-0/+1
| | | | | | | - MAN[1-9] -> MAN. Notes: svn path=/head/; revision=74816
* Set the default manual section for usr.sbin/ to 8.Ruslan Ermilov2001-03-201-1/+0
| | | | Notes: svn path=/head/; revision=74532
* o Replace part-wise instructions for building world for jail(8) withRobert Watson2001-03-111-5/+1
| | | | | | | | | | | | | a simple make world; while this does a bit more work, it means that jail(8) doesn't have to be kept in sync with /usr/src/Makefile{,.inc1} which is a moving target. MFC candidate. Submitted by: FUJISHIMA Satsuki <sf@FreeBSD.org> Reviewed by: phk Also pointed out by: Phil Kernick <Phil@Kernick.org> Notes: svn path=/head/; revision=74115
* mdoc(7) police: split punctuation characters + misc fixes.Ruslan Ermilov2001-02-011-3/+3
| | | | Notes: svn path=/head/; revision=71898
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-20 08:17:33 +0000