D57014.id177897.diff
No OneTemporary
Actions

Size

913 B

Referenced Files

None

Subscribers

None

D57014.id177897.diff
View Options

	diff --git a/sys/sys/jail.h b/sys/sys/jail.h
	--- a/sys/sys/jail.h
	+++ b/sys/sys/jail.h
	@@ -280,7 +280,15 @@
	* build time. PR_ALLOW_ALL_STATIC should contain any bit above that we expect
	* to be used on the system, while PR_ALLOW_PRISON0 will be some subset of that.
	*/
	-#define PR_ALLOW_ALL_STATIC 0x00ff87ff
	+#define PR_ALLOW_ALL_STATIC \
	+ (PR_ALLOW_SET_HOSTNAME \| PR_ALLOW_SYSVIPC \| PR_ALLOW_RAW_SOCKETS \| \
	+ PR_ALLOW_CHFLAGS \| PR_ALLOW_MOUNT \| PR_ALLOW_QUOTAS \| \
	+ PR_ALLOW_SOCKET_AF \| PR_ALLOW_MLOCK \| PR_ALLOW_READ_MSGBUF \| \
	+ PR_ALLOW_UNPRIV_DEBUG \| PR_ALLOW_SUSER \| PR_ALLOW_RESERVED_PORTS \| \
	+ PR_ALLOW_KMEM_ACCESS \| PR_ALLOW_NFSD \| PR_ALLOW_EXTATTR \| \
	+ PR_ALLOW_ADJTIME \| PR_ALLOW_SETTIME \| PR_ALLOW_ROUTING \| \
	+ PR_ALLOW_UNPRIV_PARENT_TAMPER \| PR_ALLOW_SETAUDIT)
	+
	#define PR_ALLOW_PRISON0 \
	(PR_ALLOW_ALL_STATIC & ~(PR_ALLOW_UNPRIV_PARENT_TAMPER))