cvs commit: src/sys/kern kern_jail.c src/sys/sys jail.h src/sys/ufs/ufs ufs_vnops.c src/usr.sbin/jail jail.8

[Colin Percival]

cperciva    2005-02-08 21:31:11 UTC

  FreeBSD src repository

  Modified files:
    sys/kern             kern_jail.c 
    sys/sys              jail.h 
    sys/ufs/ufs          ufs_vnops.c 
    usr.sbin/jail        jail.8 
  Log:
  Add a new sysctl, "security.jail.chflags_allowed", which controls the
  behaviour of chflags within a jail.  If set to 0 (the default), then a
  jailed root user is treated as an unprivileged user; if set to 1, then
  a jailed root user is treated the same as an unjailed root user.
  
  This is necessary to allow "make installworld" to work inside a jail,
  since it attempts to manipulate the system immutable flag on certain
  files.
  
  Discussed with: csjp, rwatson
  MFC after:      2 weeks
  
  Revision  Changes    Path
  1.46      +5 -0      src/sys/kern/kern_jail.c
  1.24      +1 -0      src/sys/sys/jail.h
  1.264     +9 -4      src/sys/ufs/ufs/ufs_vnops.c
  1.61      +9 -0      src/usr.sbin/jail/jail.8