git: e553ebd516fa - stable/14 - MAC/do: Enable changing 'security.mac.do.rules' from a jail

The branch stable/14 has been updated by olce:

URL: https://cgit.FreeBSD.org/src/commit/?id=e553ebd516fa7cbc7822f8a822e24345d0d26838

commit e553ebd516fa7cbc7822f8a822e24345d0d26838
Author:     Olivier Certner <olce@FreeBSD.org>
AuthorDate: 2024-07-03 13:49:51 +0000
Commit:     Olivier Certner <olce@FreeBSD.org>
CommitDate: 2025-04-03 19:30:58 +0000

    MAC/do: Enable changing 'security.mac.do.rules' from a jail
    
    Now that sysctl_rules() has been fixed to behave.
    
    Reviewed by:    bapt
    Approved by:    markj (mentor)
    Sponsored by:   The FreeBSD Foundation
    Differential Revision:  https://reviews.freebsd.org/D47602
    
    (cherry picked from commit b3f93680e39b90c02ddabdaf98f9c9a669d24c00)
---
 sys/security/mac_do/mac_do.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sys/security/mac_do/mac_do.c b/sys/security/mac_do/mac_do.c
index 98bace7052f6..787790cb2b34 100644
--- a/sys/security/mac_do/mac_do.c
+++ b/sys/security/mac_do/mac_do.c
@@ -331,7 +331,7 @@ out:
 }
 
 SYSCTL_PROC(_security_mac_do, OID_AUTO, rules,
-    CTLTYPE_STRING|CTLFLAG_RW|CTLFLAG_MPSAFE,
+    CTLTYPE_STRING|CTLFLAG_RW|CTLFLAG_PRISON|CTLFLAG_MPSAFE,
     0, 0, sysctl_rules, "A",
     "Rules");