From nobody Fri Jan 16 00:24:27 2026 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dsgZz4bhpz6NPtv for ; Fri, 16 Jan 2026 00:24:27 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dsgZz1vYSz3Zpp for ; Fri, 16 Jan 2026 00:24:27 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768523067; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=4v0N0NEiI1+UfI1Pn3CyUuEv4gxN3FFDpDDc0SSulXA=; b=yHWc5QmEP1j8mPxOlXaB5u4ruxdz3KCbkstK6Z6vGbe89wWoNCoU3Hqb8y/2AYzInSaut/ vbhVMUKs/re73HeQeIXI6gbFK/h+fDuABY6jv6E7oSdN+Lo2feFKrda/j1ayu9N7q9BP78 lNYW1K+A5d+hINFKixy9QFtWVy+ig17liZMavgMPSX8zIcz0wRGWvg/jS19A+JMnu7w2I5 LET0YO9a2rNbelrdUhUGWrTKek8M8G8I7xqWYkmPwQ/EFEcPKeA+UAFXkJJrjz2opdRfep Jl80OotyJKZih27ArAO6kMvz83r3SH+yHbrcHE6XfbrNgBUbenQ0t2GPMWo+vA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768523067; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=4v0N0NEiI1+UfI1Pn3CyUuEv4gxN3FFDpDDc0SSulXA=; b=AkMYdWiLioRGQ9e4ZAmduBnmsXetifl5M6F9HjyZNXCp2KGA26TP4f9Hk76rjID9uvgsHv RMQtvdgQEisttCYvIrBCNA8z2Bb5AYNe4M6x2/vlfiNsGzuTam6A1rCw5hDSHr2enUPoBW RAuLs8ozA4tkJML/OuibanBedMkvEbWowZyO7rdZbrI8BH4G1nMY5xVHtqqbNQkdf4626N HTK0fyjx5hHuP955nD2Ei1LCtgauqMSKEdmdePtXdE8wODnw3chqN2zizRpVctTyPk8v7d QQi9zrGH1LOXOEgcxzcoLk422g9YV3O1qPPz/LVf73jC3eTbSRvERYI/O6v9XA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1768523067; a=rsa-sha256; cv=none; b=etzAI10DWEvFC+j7q+dvlCrGg8PrIk/8J+5Gc9oP6x1AtIjjiinwxymeSqnwT8YEddHsGS pS3KIPge6IXQSAM1ilch3+dnNdFkOZA+cn0WSyGUzO/qcvWaPB2p15KCRXO9cfuEGx3RVs yxXauSb1xjqxwwSRfgMelD/1ZWZaYvOSPN0FWa1He2zMnhssMjKqrSTKmudXXK2655FDps oDxsHaIW99sIP5hhHLsB12EGOBHKaVa6OoVxJujU6JufqjVYJESLssbJIFCvutI0iiglDX qrv1fi44uw+Wv86jrTS77+L6Muqe7yEs4CE4ieAvHIB+vR5SPmGkXtHYZO3Weg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4dsgZz11MPzrhk for ; Fri, 16 Jan 2026 00:24:27 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3acd1 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Fri, 16 Jan 2026 00:24:27 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Kyle Evans Subject: git: 1e8c28712aaf - main - jail: document the mac.label parameter List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kevans X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 1e8c28712aafc9a3339e8a832767a70c08168bdc Auto-Submitted: auto-generated Date: Fri, 16 Jan 2026 00:24:27 +0000 Message-Id: <6969853b.3acd1.135dc243@gitrepo.freebsd.org> The branch main has been updated by kevans: URL: https://cgit.FreeBSD.org/src/commit/?id=1e8c28712aafc9a3339e8a832767a70c08168bdc commit 1e8c28712aafc9a3339e8a832767a70c08168bdc Author: Kyle Evans AuthorDate: 2025-12-04 01:45:56 +0000 Commit: Kyle Evans CommitDate: 2026-01-16 00:23:40 +0000 jail: document the mac.label parameter In particular, we should provide a hint about mac.conf(5), since libjail will just use the mac_prepare_type(3) API to provide a reasonably sane interface for system administrators. Progammers wanting to fetch an arbitrary MAC label would need to bypass libjail and use jail_get(2) directly with their own prepared `struct mac`. Differential Revision: https://reviews.freebsd.org/D54067 --- share/man/man4/mac.4 | 4 +++- usr.sbin/jail/jail.8 | 13 ++++++++++++- 2 files changed, 15 insertions(+), 2 deletions(-) diff --git a/share/man/man4/mac.4 b/share/man/man4/mac.4 index 2e2abbdb2c06..d7ae30a1bac4 100644 --- a/share/man/man4/mac.4 +++ b/share/man/man4/mac.4 @@ -28,7 +28,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd December 30, 2024 +.Dd January 15, 2026 .Dt MAC 4 .Os .Sh NAME @@ -165,6 +165,7 @@ and modifying its MAC policy label. .Bl -column "user (by login class)" "Xr setfmac 8 , Xr setfsmac 8" -offset indent .It Sy "Subject/Object" Ta Sy "Utility" .It "File system object" Ta Xr setfmac 8 , Xr setfsmac 8 +.It Jail Ta Xr jail 8 .It "Network interface" Ta Xr ifconfig 8 .It "TTY (by login class)" Ta Xr login.conf 5 .It "User (by login class)" Ta Xr login.conf 5 @@ -221,6 +222,7 @@ man page. .Xr mac_test 4 , .Xr login.conf 5 , .Xr maclabel 7 , +.Xr jail 8 , .Xr getfmac 8 , .Xr getpmac 8 , .Xr setfmac 8 , diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8 index 6098010ebbc4..45eb7dea096d 100644 --- a/usr.sbin/jail/jail.8 +++ b/usr.sbin/jail/jail.8 @@ -26,7 +26,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd November 13, 2025 +.Dd December 4, 2025 .Dt JAIL 8 .Os .Sh NAME @@ -503,6 +503,15 @@ pseudo-parameter set. The ID of the cpuset associated with this jail (read-only). .It Va dying This is true if the jail is in the process of shutting down (read-only). +.It Va mac.label +The +.Xr mac 3 +label associated with this jail. +Note that a +.Dq jail +entry in +.Xr mac.conf 5 +may need to be configured in order to retrieve the MAC label. .It Va parent The .Va jid @@ -1550,6 +1559,7 @@ environment of the first jail. .Xr clock_settime 2 , .Xr jail_set 2 , .Xr ntp_adjtime 2 , +.Xr mac 3 , .Xr devfs 4 , .Xr fdescfs 4 , .Xr linprocfs 4 , @@ -1557,6 +1567,7 @@ environment of the first jail. .Xr procfs 4 , .Xr vmm 4 , .Xr jail.conf 5 , +.Xr mac.conf 5 , .Xr rc.conf 5 , .Xr sysctl.conf 5 , .Xr bsdconfig 8 ,