Submitted By: Matt Miller <email@example.com>
|101 ↗||(On Diff #26848)|
If you look at the file in !phabricator, all of the 0s line up perfectly at the tab stop. due to the length of the allow MIB, there was no room for a tab without shifting to the next tab stop. so I did what the file had done for exec.system_jail_user
You don't need the KP_ALLOW_RESERVED_PORTS in jailp.h and config.c - you can just leave these files untouched. The KP_* defines are for parameters that are internally referenced somewhere within jail(8). That includes most of the allow.* parameters, only to handle back-compatibility with the security.jail.*_allowed sysctls.
The other changes (the kernel part) look good.