Page Menu
Home
FreeBSD
Search
Configure Global Search
Log In
Files
F157089701
D40639.id123505.diff
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Flag For Later
Award Token
Size
1 KB
Referenced Files
None
Subscribers
None
D40639.id123505.diff
View Options
diff --git a/share/man/man9/prison_check.9 b/share/man/man9/prison_check.9
--- a/share/man/man9/prison_check.9
+++ b/share/man/man9/prison_check.9
@@ -27,22 +27,23 @@
.\"
.\" $FreeBSD$
.\"
-.Dd December 11, 2003
+.Dd June 16, 2023
.Dt PRISON_CHECK 9
.Os
.Sh NAME
.Nm prison_check
-.Nd determine if two credentials belong to the same jail
+.Nd whether credentials belong to the same jail or a sub-jail
.Sh SYNOPSIS
.In sys/jail.h
.Ft int
.Fn prison_check "struct ucred *cred1" "struct ucred *cred2"
.Sh DESCRIPTION
-This function can be used to determine if the two credentials
+This function can be used to determine if a subject with credentials
.Fa cred1
-and
+is not denied access to subjects or objects with credentials
.Fa cred2
-belong to the same jail.
+according to the policy that access is permitted to subjects or objects in the
+same jail or sub-jails.
.Sh RETURN VALUES
The
.Fn prison_check
@@ -50,12 +51,9 @@
returns
.Er ESRCH
if
-.Fa cred1
-has been jailed, and
-.Fa cred1
-and
.Fa cred2
-do not belong to the same jail.
+is not in the same jail or a sub-jail of that of
+.Fa cred1 .
In all other cases,
.Fn prison_check
returns zero.
File Metadata
Details
Attached
Mime Type
text/plain
Expires
Tue, May 19, 9:23 AM (5 h, 40 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
33304989
Default Alt Text
D40639.id123505.diff (1 KB)
Attached To
Mode
D40639: prison_check(9): Bring up-to-date with hierarchical jails
Attached
Detach File
Event Timeline
Log In to Comment