git: 66fb52a27279 - stable/14 - MAC: Define a common 'mac' node for MAC's jail parameters

The branch stable/14 has been updated by olce:

URL: https://cgit.FreeBSD.org/src/commit/?id=66fb52a27279235d0c42b605355afe3227feacee

commit 66fb52a27279235d0c42b605355afe3227feacee
Author:     Olivier Certner <olce@FreeBSD.org>
AuthorDate: 2024-07-03 14:30:19 +0000
Commit:     Olivier Certner <olce@FreeBSD.org>
CommitDate: 2025-01-16 18:06:54 +0000

    MAC: Define a common 'mac' node for MAC's jail parameters
    
    To be used by MAC/do.
    
    Reviewed by:    jamie
    Approved by:    markj (mentor)
    MFC after:      5 days
    Relnotes:       yes
    Sponsored by:   The FreeBSD Foundation
    Differential Revision:  https://reviews.freebsd.org/D46899
    
    (cherry picked from commit 5041b20503dbb442cc9ebd0a6e4db26905102c72)
---
 sys/security/mac/mac_framework.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/sys/security/mac/mac_framework.c b/sys/security/mac/mac_framework.c
index 7fdb7b4ed2d2..b5eb1620300a 100644
--- a/sys/security/mac/mac_framework.c
+++ b/sys/security/mac/mac_framework.c
@@ -72,6 +72,7 @@
 #include <sys/param.h>
 #include <sys/systm.h>
 #include <sys/condvar.h>
+#include <sys/jail.h>
 #include <sys/kernel.h>
 #include <sys/lock.h>
 #include <sys/mac.h>
@@ -105,6 +106,11 @@ SDT_PROBE_DEFINE1(mac, , policy, unregister,
 SYSCTL_NODE(_security, OID_AUTO, mac, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
     "TrustedBSD MAC policy controls");
 
+/*
+ * Root sysctl node for MAC modules' jail parameters.
+ */
+SYSCTL_JAIL_PARAM_NODE(mac, "Jail parameters for MAC policy controls");
+
 /*
  * Declare that the kernel provides a specific version of MAC support.
  * This permits modules to refuse to be loaded if the necessary support isn't