Date: Thu, 5 Feb 2009 14:15:18 +0000 (UTC) From: Jamie Gritton <jamie@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/kern kern_jail.c uipc_socket.c src/sys/sys jail.h Message-ID: <200902051415.n15EFg3W048755@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
jamie 2009-02-05 14:15:18 UTC
FreeBSD src repository
Modified files:
sys/kern kern_jail.c uipc_socket.c
sys/sys jail.h
Log:
SVN rev 188146 on 2009-02-05 14:15:18Z by jamie
Don't allow creating a socket with a protocol family that the current
jail doesn't support. This involves a new function prison_check_af,
like prison_check_ip[46] but that checks only the family.
With this change, most of the errors generated by jailed sockets
shouldn't ever occur, at least until jails are changeable.
Approved by: bz (mentor)
Revision Changes Path
1.95 +42 -0 src/sys/kern/kern_jail.c
1.327 +1 -8 src/sys/kern/uipc_socket.c
1.35 +1 -0 src/sys/sys/jail.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200902051415.n15EFg3W048755>