/[base]
ViewVC logotype

Revision 188281


Jump to revision: Previous Next
Author: bz
Date: Sat Feb 7 13:19:08 2009 UTC (15 years, 4 months ago)
Changed paths: 57
Log Message:
MFC:
 r185435:
  This enhances the current jail implementation to permit multiple
  addresses per jail. In addtion to IPv4, IPv6 is supported as well.
  Due to updated checks it is even possible to have jails without
  an IP address at all, which basically gives one a chroot with
  restricted process view, no networking,..

  SCTP support was updated and supports IPv6 in jails as well.

  Cpuset support permits jails to be bound to specific processor
  sets after creation.

  Jails can have an unrestricted (no duplicate protection, etc.) name
  in addition to the hostname. The jail name cannot be changed from
  within a jail and is considered to be used for management purposes
  or as audit-token in the future.

  DDB 'show jails' command was added to aid debugging.

  Proper compat support permits 32bit jail binaries to be used on 64bit
  systems to manage jails. Also backward compatibility was preserved where
  possible: for jail v1 syscalls, as well as with user space management
  utilities.

  Both jail as well as prison version were updated for the new features.
  A gap was intentionally left as the intermediate versions had been
  used by various patches floating around the last years.

  Bump __FreeBSD_version for the afore mentioned and in kernel changes.

 r185441:
  Unbreak the no-networks (no INET/6) build.

 r185899:
  Correctly check the number of prison states to not access anything
  outside the prison_states array.
  When checking if there is a name configured for the prison, check the
  first character to not be '\0' instead of checking if the char array
  is present, which it always is. Note, that this is different for the
  *jailname in the syscall.

  Found with:	Coverity Prevent(tm)
  CID:		4156, 4155

 r186085:
  Make sure that the direct jls invocations prints something
  reasonable close to and in the same format as it had always.

 r186606:
  Make sure that unused j->ip[46] are cleared.

 r186834:
  Document the special loopback address behaviour of jails.

  PR:		kern/103464

 r186841:
  Put the devfs ruleset next to devfs enable, add a comment about
  the suggested ruleset[1].

  While here use an IP from the 'test-net' prefix for docs.

  PR:		kern/130102

 r187059:
  Add a short section talking about jails and file systems; mention the
  mountand jail-aware file systems as well as quota.

  PR:		kern/68192

 r187092:
  Sort .Xr.

 r187365:
  s,unmount 8,umount 8, it is unmount(2) which I did not mean.

 r187669:
  Update the description of the '-h' option wrt to primary addresses
  per address family and add a reference to the ip-addresses option.

 r187670:
  New sentence starts on a new line.


Changed paths

Path Details
Directorystable/7/UPDATING modified , text changed
Directorystable/7/etc/ modified , props changed
Directorystable/7/etc/defaults/rc.conf modified , text changed
Directorystable/7/etc/periodic/weekly/ modified , props changed
Directorystable/7/lib/libc/ modified , props changed
Directorystable/7/lib/libc/string/ffsll.c modified , props changed
Directorystable/7/lib/libc/string/flsll.c modified , props changed
Directorystable/7/lib/libc/sys/cpuset_getaffinity.2 modified , text changed
Directorystable/7/lib/libc/sys/jail.2 modified , text changed
Directorystable/7/lib/libkvm/ modified , props changed
Directorystable/7/lib/libkvm/kvm_proc.c modified , text changed
Directorystable/7/share/man/man4/ modified , props changed
Directorystable/7/share/man/man4/ddb.4 modified , text changed
Directorystable/7/share/man/man4/igb.4 modified , props changed
Directorystable/7/sys/ modified , props changed
Directorystable/7/sys/compat/freebsd32/freebsd32.h modified , text changed
Directorystable/7/sys/compat/freebsd32/freebsd32_misc.c modified , text changed
Directorystable/7/sys/compat/freebsd32/syscalls.master modified , text changed
Directorystable/7/sys/contrib/pf/ modified , props changed
Directorystable/7/sys/dev/ath/ath_hal/ modified , props changed
Directorystable/7/sys/dev/cxgb/ modified , props changed
Directorystable/7/sys/kern/kern_cpuset.c modified , text changed
Directorystable/7/sys/kern/kern_exit.c modified , text changed
Directorystable/7/sys/kern/kern_fork.c modified , text changed
Directorystable/7/sys/kern/kern_jail.c modified , text changed
Directorystable/7/sys/kern/uipc_socket.c modified , text changed
Directorystable/7/sys/net/if.c modified , text changed
Directorystable/7/sys/net/rtsock.c modified , text changed
Directorystable/7/sys/netinet/in_pcb.c modified , text changed
Directorystable/7/sys/netinet/raw_ip.c modified , text changed
Directorystable/7/sys/netinet/sctp_pcb.c modified , text changed
Directorystable/7/sys/netinet/sctp_usrreq.c modified , text changed
Directorystable/7/sys/netinet/tcp_usrreq.c modified , text changed
Directorystable/7/sys/netinet/udp_usrreq.c modified , text changed
Directorystable/7/sys/netinet6/in6_pcb.c modified , text changed
Directorystable/7/sys/netinet6/in6_src.c modified , text changed
Directorystable/7/sys/netinet6/raw_ip6.c modified , text changed
Directorystable/7/sys/netinet6/udp6_usrreq.c modified , text changed
Directorystable/7/sys/security/mac_bsdextended/mac_bsdextended.c modified , text changed
Directorystable/7/sys/sys/cpuset.h modified , text changed
Directorystable/7/sys/sys/jail.h modified , text changed
Directorystable/7/sys/sys/param.h modified , text changed
Directorystable/7/usr.bin/cpuset/ modified , props changed
Directorystable/7/usr.bin/cpuset/cpuset.1 modified , text changed
Directorystable/7/usr.bin/cpuset/cpuset.c modified , text changed
Directorystable/7/usr.sbin/jail/ modified , props changed
Directorystable/7/usr.sbin/jail/Makefile modified , text changed
Directorystable/7/usr.sbin/jail/jail.8 modified , text changed
Directorystable/7/usr.sbin/jail/jail.c modified , text changed
Directorystable/7/usr.sbin/jexec/ modified , props changed
Directorystable/7/usr.sbin/jexec/Makefile modified , text changed
Directorystable/7/usr.sbin/jexec/jexec.8 modified , text changed
Directorystable/7/usr.sbin/jexec/jexec.c modified , text changed
Directorystable/7/usr.sbin/jls/ modified , props changed
Directorystable/7/usr.sbin/jls/Makefile modified , text changed
Directorystable/7/usr.sbin/jls/jls.8 modified , text changed
Directorystable/7/usr.sbin/jls/jls.c modified , text changed

  ViewVC Help
Powered by ViewVC 1.1.27