git: ba99013a4464 - main - tarfs: allow mounting inside jails
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 20 Aug 2026 04:20:36 UTC
The branch main has been updated by siva:
URL: https://cgit.FreeBSD.org/src/commit/?id=ba99013a4464c2f3e8cc0a89c23d03810dc2d37e
commit ba99013a4464c2f3e8cc0a89c23d03810dc2d37e
Author: Siva Mahadevan <siva@FreeBSD.org>
AuthorDate: 2026-08-20 04:18:43 +0000
Commit: Siva Mahadevan <siva@FreeBSD.org>
CommitDate: 2026-08-20 04:19:40 +0000
tarfs: allow mounting inside jails
Reviewed by: des
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58833
---
sys/fs/tarfs/tarfs_vfsops.c | 2 +-
usr.sbin/jail/jail.8 | 10 +++++++++-
2 files changed, 10 insertions(+), 2 deletions(-)
diff --git a/sys/fs/tarfs/tarfs_vfsops.c b/sys/fs/tarfs/tarfs_vfsops.c
index 8aa261c88da9..8c15fe684e4c 100644
--- a/sys/fs/tarfs/tarfs_vfsops.c
+++ b/sys/fs/tarfs/tarfs_vfsops.c
@@ -1236,6 +1236,6 @@ static struct vfsops tarfs_vfsops = {
.vfs_unmount = tarfs_unmount,
.vfs_vget = tarfs_vget,
};
-VFS_SET(tarfs_vfsops, tarfs, VFCF_READONLY);
+VFS_SET(tarfs_vfsops, tarfs, VFCF_JAIL | VFCF_READONLY);
MODULE_VERSION(tarfs, 1);
MODULE_DEPEND(tarfs, xz, 1, 1, 1);
diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8
index 3fc396824b58..550e62f235c3 100644
--- a/usr.sbin/jail/jail.8
+++ b/usr.sbin/jail/jail.8
@@ -26,7 +26,7 @@
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
-.Dd December 4, 2025
+.Dd August 13, 2026
.Dt JAIL 8
.Os
.Sh NAME
@@ -807,6 +807,14 @@ This permission is effective only together with
and only when
.Va enforce_statfs
is set to a value lower than 2.
+.It Va allow.mount.tarfs
+privileged users inside the jail will be able to mount and unmount the
+tarfs file system.
+This permission is effective only together with
+.Va allow.mount
+and only when
+.Va enforce_statfs
+is set to a value lower than 2.
.It Va allow.mount.tmpfs
privileged users inside the jail will be able to mount and unmount the
tmpfs file system.