diff --git a/sys/fs/nfsclient/nfs_clvfsops.c b/sys/fs/nfsclient/nfs_clvfsops.c --- a/sys/fs/nfsclient/nfs_clvfsops.c +++ b/sys/fs/nfsclient/nfs_clvfsops.c @@ -153,7 +153,7 @@ * for "nfscl" and is needed so that a custom event handling * function gets called. MODULE_DEPEND() macros are found there. */ -VFS_SET(nfs_vfsops, nfs, VFCF_NETWORK | VFCF_SBDRY); +VFS_SET(nfs_vfsops, nfs, VFCF_JAIL | VFCF_NETWORK | VFCF_SBDRY); MODULE_VERSION(nfs, 1); diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8 --- a/usr.sbin/jail/jail.8 +++ b/usr.sbin/jail/jail.8 @@ -23,7 +23,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd May 11, 2025 +.Dd July 11, 2025 .Dt JAIL 8 .Os .Sh NAME @@ -746,6 +746,14 @@ and only when .Va enforce_statfs is set to a value lower than 2. +.It Va allow.mount.nfs +privileged users inside the jail will be able to mount and unmount the +nfs file system. +This permission is effective only together with +.Va allow.mount +and only when +.Va enforce_statfs +is set to a value lower than 2. .It Va allow.mount.nullfs privileged users inside the jail will be able to mount and unmount the nullfs file system.