Page MenuHomeFreeBSD

jail: separate "statically valid allow flags" from "prison0 allow flags"
ClosedPublic

Authored by kevans on Jul 31 2025, 5:22 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Oct 12, 10:00 AM
Unknown Object (File)
Sun, Oct 12, 9:59 AM
Unknown Object (File)
Sat, Oct 11, 11:06 PM
Unknown Object (File)
Sat, Oct 11, 11:06 PM
Unknown Object (File)
Sat, Oct 11, 11:06 PM
Unknown Object (File)
Sat, Oct 11, 1:45 PM
Unknown Object (File)
Wed, Oct 8, 2:02 AM
Unknown Object (File)
Fri, Sep 26, 10:57 AM
Subscribers

Details

Summary

The current setup means that we can't add an allow flag in sys/jail.h
that's disabled by default without removing it from the pr_flags
assignment in kern_jail.c. That's technically fine, but I think it's
better to make it more prevalent at the PR_ALLOW_* definition site so
that it's top-of-mind when adding a new flag.

This is a preparatory change for adding an allow flag that prison0 will
also have disabled by default, but with an allow.* knob and sysctl to
enable it.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable