jail getfsstat patches.

[Julian Elischer]

On Sun, 27 Jun 2004, Pawel Jakub Dawidek wrote:

> On Sun, Jun 27, 2004 at 08:59:32AM +0200, Pawel Jakub Dawidek wrote:
> +> If you give me a few days (maybe I'll be ready today) I'll try to prepare
> +> patch to commit so we can review it together.
> 
> Ok, here it goes:
> 
> 	http://people.freebsd.org/~pjd/patches/jail_enforce_statfs.patch
> 
> As you can see, all mac_check_mount_stat() calls are placed after a
> prison_canseemount() call, so we can considern moving mac_check_mount_stat()
> to prison_canseemount() function.
> 

 The patch looks good to me but I don't have a 5.x machine with jails at
the moment (I may try set up a small jail tomorrow to test it).

do you have a 4.x version?

I have been testing the kernel module version for 4.x
and it seems to work as advertised..