Change Details

Add a credential to the cdev object in sysctl_vmm_create, then check that we have the correct credentials in sysctl_vmm_destroy. This prevents a process in one jail from opening or destroying the /dev/vmm file corresponding to a vm in another jail. I initially added a credential to the vm struct as well, but I believe this is not necessary as vm_destroy (struct vm *) is never called without first opening the corresponding /dev/vmm file.

Add a credential to the cdev object in sysctl_vmm_create, then check that we have the correct credentials in sysctl_vmm_destroy. This prevents a process in one jail from opening or destroying the /dev/vmm file corresponding to a vm in another jail.

Add a credential to the cdev object in sysctl_vmm_create, then check that we have the correct credentials in sysctl_vmm_destroy. This prevents a process in one jail from opening or destroying the /dev/vmm file corresponding to a vm in another jail. I initially added a credential to the vm struct as well, but I believe this is not necessary as vm_destroy (struct vm *) is never called without first opening the corresponding /dev/vmm file.