git: 5041b20503db - main - MAC: Define a common 'mac' node for MAC's jail parameters

The branch main has been updated by olce:

URL: https://cgit.FreeBSD.org/src/commit/?id=5041b20503dbb442cc9ebd0a6e4db26905102c72

commit 5041b20503dbb442cc9ebd0a6e4db26905102c72
Author:     Olivier Certner <olce@FreeBSD.org>
AuthorDate: 2024-07-03 14:30:19 +0000
Commit:     Olivier Certner <olce@FreeBSD.org>
CommitDate: 2024-12-16 14:42:27 +0000

    MAC: Define a common 'mac' node for MAC's jail parameters
    
    To be used by MAC/do.
    
    Reviewed by:    jamie
    Approved by:    markj (mentor)
    MFC after:      5 days
    Relnotes:       yes
    Sponsored by:   The FreeBSD Foundation
    Differential Revision:  https://reviews.freebsd.org/D46899
---
 sys/security/mac/mac_framework.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/sys/security/mac/mac_framework.c b/sys/security/mac/mac_framework.c
index e290f837e297..d742b5dcbc3a 100644
--- a/sys/security/mac/mac_framework.c
+++ b/sys/security/mac/mac_framework.c
@@ -71,6 +71,7 @@
 #include <sys/param.h>
 #include <sys/systm.h>
 #include <sys/condvar.h>
+#include <sys/jail.h>
 #include <sys/kernel.h>
 #include <sys/lock.h>
 #include <sys/mac.h>
@@ -104,6 +105,11 @@ SDT_PROBE_DEFINE1(mac, , policy, unregister,
 SYSCTL_NODE(_security, OID_AUTO, mac, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
     "TrustedBSD MAC policy controls");
 
+/*
+ * Root sysctl node for MAC modules' jail parameters.
+ */
+SYSCTL_JAIL_PARAM_NODE(mac, "Jail parameters for MAC policy controls");
+
 /*
  * Declare that the kernel provides a specific version of MAC support.
  * This permits modules to refuse to be loaded if the necessary support isn't