Multiple IP Jail's patch for FreeBSD 6.2

Andre Oppermann andre at freebsd.org
Wed May 16 15:17:47 UTC 2007


Chris wrote:
> On 16/05/07, Marko Zec <zec at icir.org> wrote:
>> OTOH, even if we miss the window for sneaking this into 7.0-R, it would
>> be a huge pitty not to at least reserve a few additional fields in
>> various kernel structures needed to support stack virtualization.  That
>> way it would be possible to maintain a virtualized 7.0-R kernel in a
>> separate code branch, which could be used as a snap-in replacement for
>> the stock kernel even after API / ABI freeze comes into effect.  This
>> would allow us to give people an opportunity to conveniently test and
>> play with the new framework on an otherwise production-grade OS, while
>> continuing work towards (hopefully) merging of the chages into 8.0 at
>> some point.
> 
> Would like to see this in 7.0 considering many of us have been waiting
> for such a feature since 4.x days.  There is patches that make this
> work with 5.x and 6.x so I have always been puzzled why it hasnt been
> commited to the base, clearly enough time to make 7.0 a dream for
> desktop users but I see many server side things been pushed aside.
> Please make this happen as waiting for 8.0 seems forever.

We should indeed reserve some spare fields in critical structures to
make a MFC of it an option for 7.1 or 7.2.  We'll discuss these issues
here at BSDCan Developer Summit in more details.  Marko is currently
sitting about 2 meters from me. ;-)

-- 
Andre



More information about the freebsd-hackers mailing list