Marking some FS as jailable

[Jamie Gritton]

On 02/14/13 06:27, Baptiste Daroussin wrote:
> On Tue, Feb 12, 2013 at 10:06:29PM -0700, Jamie Gritton wrote:
>> On 02/12/13 12:40, Baptiste Daroussin wrote:
>>>
>>> I would like to mark some filesystem as jailable, here is the one I need:
>>> linprocfs, tmpfs and fdescfs, I was planning to do it with adding a
>>> allow.mount.${fs} for each one.
>>>
>>> Anyone has an objection?
>>
>> Would it make sense for linprocfs to use the existing allow.mount.procfs
>> flag?
>
> Here is a patch that uses allow.mount.procfs for linsysfs and linprocfs.
>
> It also addd a new allow.mount.tmpfs to allow tmpfs.
>
> It seems to work here, can anyone confirm this is the right way to do it?
>
> I'll commit in 2 parts: first lin*fs, second tmpfs related things
>
> http://people.freebsd.org/~bapt/jail-fs.diff

There are some problems. The usage on the mount side of things looks
correct, but it needs more on the jail side. I'm including a patch just
of that part, with a correction in jail.h and further changes in kern_jail.c

- Jamie
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: jail-fs.diff
URL: <http://lists.freebsd.org/pipermail/freebsd-fs/attachments/20130214/6c5f211c/attachment.ksh>