Differential D57014 Diff 177897 sys/sys/jail.h

Changeset View

Standalone View

sys/sys/jail.h

	Show First 20 Lines • Show All 274 Lines • ▼ Show 20 Lines
	#define PR_ALLOW_SETAUDIT 0x00800000			#define PR_ALLOW_SETAUDIT 0x00800000

	/*			/*
	* PR_ALLOW_PRISON0 are the allow flags that we apply by default to prison0,			* PR_ALLOW_PRISON0 are the allow flags that we apply by default to prison0,
	* while PR_ALLOW_ALL_STATIC are all of the allow bits that we have allocated at			* while PR_ALLOW_ALL_STATIC are all of the allow bits that we have allocated at
	* build time. PR_ALLOW_ALL_STATIC should contain any bit above that we expect			* build time. PR_ALLOW_ALL_STATIC should contain any bit above that we expect
	* to be used on the system, while PR_ALLOW_PRISON0 will be some subset of that.			* to be used on the system, while PR_ALLOW_PRISON0 will be some subset of that.
	*/			*/
	#define PR_ALLOW_ALL_STATIC 0x00ff87ff			#define PR_ALLOW_ALL_STATIC \
				(PR_ALLOW_SET_HOSTNAME \| PR_ALLOW_SYSVIPC \| PR_ALLOW_RAW_SOCKETS \| \
				PR_ALLOW_CHFLAGS \| PR_ALLOW_MOUNT \| PR_ALLOW_QUOTAS \| \
				PR_ALLOW_SOCKET_AF \| PR_ALLOW_MLOCK \| PR_ALLOW_READ_MSGBUF \| \
				PR_ALLOW_UNPRIV_DEBUG \| PR_ALLOW_SUSER \| PR_ALLOW_RESERVED_PORTS \| \
				PR_ALLOW_KMEM_ACCESS \| PR_ALLOW_NFSD \| PR_ALLOW_EXTATTR \| \
				PR_ALLOW_ADJTIME \| PR_ALLOW_SETTIME \| PR_ALLOW_ROUTING \| \
				PR_ALLOW_UNPRIV_PARENT_TAMPER \| PR_ALLOW_SETAUDIT)

	#define PR_ALLOW_PRISON0 \			#define PR_ALLOW_PRISON0 \
	(PR_ALLOW_ALL_STATIC & ~(PR_ALLOW_UNPRIV_PARENT_TAMPER))			(PR_ALLOW_ALL_STATIC & ~(PR_ALLOW_UNPRIV_PARENT_TAMPER))

	/*			/*
	* PR_ALLOW_DIFFERENCES determines which flags are able to be			* PR_ALLOW_DIFFERENCES determines which flags are able to be
	* different between the parent and child jail upon creation.			* different between the parent and child jail upon creation.
	*/			*/
	#define PR_ALLOW_DIFFERENCES \			#define PR_ALLOW_DIFFERENCES \
	▲ Show 20 Lines • Show All 236 Lines • Show Last 20 Lines