git: ba99013a4464 - main - tarfs: allow mounting inside jails

From: Siva Mahadevan <siva_at_FreeBSD.org>
Date: Thu, 20 Aug 2026 04:20:36 UTC
The branch main has been updated by siva:

URL: https://cgit.FreeBSD.org/src/commit/?id=ba99013a4464c2f3e8cc0a89c23d03810dc2d37e

commit ba99013a4464c2f3e8cc0a89c23d03810dc2d37e
Author:     Siva Mahadevan <siva@FreeBSD.org>
AuthorDate: 2026-08-20 04:18:43 +0000
Commit:     Siva Mahadevan <siva@FreeBSD.org>
CommitDate: 2026-08-20 04:19:40 +0000

    tarfs: allow mounting inside jails
    
    Reviewed by:    des
    MFC after:      1 week
    Sponsored by:   The FreeBSD Foundation
    Differential Revision:  https://reviews.freebsd.org/D58833
---
 sys/fs/tarfs/tarfs_vfsops.c |  2 +-
 usr.sbin/jail/jail.8        | 10 +++++++++-
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/sys/fs/tarfs/tarfs_vfsops.c b/sys/fs/tarfs/tarfs_vfsops.c
index 8aa261c88da9..8c15fe684e4c 100644
--- a/sys/fs/tarfs/tarfs_vfsops.c
+++ b/sys/fs/tarfs/tarfs_vfsops.c
@@ -1236,6 +1236,6 @@ static struct vfsops tarfs_vfsops = {
 	.vfs_unmount =	tarfs_unmount,
 	.vfs_vget =	tarfs_vget,
 };
-VFS_SET(tarfs_vfsops, tarfs, VFCF_READONLY);
+VFS_SET(tarfs_vfsops, tarfs, VFCF_JAIL | VFCF_READONLY);
 MODULE_VERSION(tarfs, 1);
 MODULE_DEPEND(tarfs, xz, 1, 1, 1);
diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8
index 3fc396824b58..550e62f235c3 100644
--- a/usr.sbin/jail/jail.8
+++ b/usr.sbin/jail/jail.8
@@ -26,7 +26,7 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.Dd December 4, 2025
+.Dd August 13, 2026
 .Dt JAIL 8
 .Os
 .Sh NAME
@@ -807,6 +807,14 @@ This permission is effective only together with
 and only when
 .Va enforce_statfs
 is set to a value lower than 2.
+.It Va allow.mount.tarfs
+privileged users inside the jail will be able to mount and unmount the
+tarfs file system.
+This permission is effective only together with
+.Va allow.mount
+and only when
+.Va enforce_statfs
+is set to a value lower than 2.
 .It Va allow.mount.tmpfs
 privileged users inside the jail will be able to mount and unmount the
 tmpfs file system.