Date: Mon, 28 Aug 2000 13:35:32 -0400 (EDT) From: Robert Watson <rwatson@FreeBSD.ORG> To: Poul-Henning Kamp <phk@critter.freebsd.dk> Cc: freebsd-fs@FreeBSD.ORG Subject: Re: procfs_lookup() and jail interaction Message-ID: <Pine.NEB.3.96L.1000828133358.84062N-100000@fledge.watson.org> In-Reply-To: <11832.967483188@critter>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 28 Aug 2000, Poul-Henning Kamp wrote:
> >So the check is still happening above the VFS layer.
> >
> >I'll look at the code further this evening.
>
> Hmm, but vn_open needs to find the vnode first, and that means
> a VOP_LOOKUP into procfs doesn't it ? How else (when the vfscache
> isn't used) would it know which vnode ?
Sure enough, procfs_lookup() was missing a call to {PRISON_CHECK(),
p_cansee()}, so adding one now gives the right results:
alsvid:~> touch /proc/1
touch: /proc/1: Read-only file system
I'll update p_stuff, and keep looking for other problems.
Thanks,
Robert N M Watson
robert@fledge.watson.org http://www.watson.org/~robert/
PGP key fingerprint: AF B5 5F FF A6 4A 79 37 ED 5F 55 E9 58 04 6A B1
TIS Labs at Network Associates, Safeport Network Services
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-fs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1000828133358.84062N-100000>