Pawel Jakub Dawidek f3a8d2f93c Add security.jail.mount_allowed sysctl, which allows to mount and ... unmount jail-friendly file systems from within a jail. Precisely it grants PRIV_VFS_MOUNT, PRIV_VFS_UNMOUNT and PRIV_VFS_MOUNT_NONUSER privileges for a jailed super-user. It is turned off by default. A jail-friendly file system is a file system which driver registers itself with VFCF_JAIL flag via VFS_SET(9) API. The lsvfs(1) command can be used to see which file systems are jail-friendly ones. There currently no jail-friendly file systems, ZFS will be the first one. In the future we may consider marking file systems like nullfs as jail-friendly. Reviewed by: rwatson		2007-04-05 21:03:05 +00:00
..
lsvfs.1	spell "file system" correctly	2005-01-24 20:06:16 +00:00
lsvfs.c	Add security.jail.mount_allowed sysctl, which allows to mount and	2007-04-05 21:03:05 +00:00
Makefile