Marking some FS as jailable

[Baptiste Daroussin]

On Tue, Feb 12, 2013 at 10:06:29PM -0700, Jamie Gritton wrote:
> On 02/12/13 12:40, Baptiste Daroussin wrote:
> > Hi,
> >
> > I would like to mark some filesystem as jailable, here is the one I need:
> > linprocfs, tmpfs and fdescfs, I was planning to do it with adding a
> > allow.mount.${fs} for each one.
> >
> > Anyone has an objection?
> >
> > regards,
> > Bapt
> 
> Would it make sense for linprocfs to use the existing allow.mount.procfs
> flag?

Here is a patch that uses allow.mount.procfs for linsysfs and linprocfs.

It also addd a new allow.mount.tmpfs to allow tmpfs.

It seems to work here, can anyone confirm this is the right way to do it?

I'll commit in 2 parts: first lin*fs, second tmpfs related things

http://people.freebsd.org/~bapt/jail-fs.diff

regards,
Bapt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-fs/attachments/20130214/d265c09e/attachment.sig>