Marking some FS as jailable

Baptiste Daroussin bapt at FreeBSD.org
Thu Feb 14 14:56:11 UTC 2013


On Thu, Feb 14, 2013 at 07:40:58AM -0700, Jamie Gritton wrote:
> On 02/14/13 06:27, Baptiste Daroussin wrote:
> > On Tue, Feb 12, 2013 at 10:06:29PM -0700, Jamie Gritton wrote:
> >> On 02/12/13 12:40, Baptiste Daroussin wrote:
> >>>
> >>> I would like to mark some filesystem as jailable, here is the one I need:
> >>> linprocfs, tmpfs and fdescfs, I was planning to do it with adding a
> >>> allow.mount.${fs} for each one.
> >>>
> >>> Anyone has an objection?
> >>
> >> Would it make sense for linprocfs to use the existing allow.mount.procfs
> >> flag?
> >
> > Here is a patch that uses allow.mount.procfs for linsysfs and linprocfs.
> >
> > It also addd a new allow.mount.tmpfs to allow tmpfs.
> >
> > It seems to work here, can anyone confirm this is the right way to do it?
> >
> > I'll commit in 2 parts: first lin*fs, second tmpfs related things
> >
> > http://people.freebsd.org/~bapt/jail-fs.diff
> 
> There are some problems. The usage on the mount side of things looks
> correct, but it needs more on the jail side. I'm including a patch just
> of that part, with a correction in jail.h and further changes in kern_jail.c
> 
> - Jamie

Thank you the patch has been updated with your fixes.

regards
Bapt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-jail/attachments/20130214/e36925fc/attachment.sig>


More information about the freebsd-jail mailing list