Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Oct 2006 00:32:27 GMT
From:      Robert Watson <rwatson@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 108138 for review
Message-ID:  <200610200032.k9K0WRJl079421@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=108138

Change 108138 by rwatson@rwatson_zoo on 2006/10/20 00:32:17

	Do allow System V IPC and POSIX message queue privileges in Jail.

Affected files ...

.. //depot/projects/trustedbsd/priv/sys/kern/kern_jail.c#8 edit

Differences ...

==== //depot/projects/trustedbsd/priv/sys/kern/kern_jail.c#8 (text+ko) ====

@@ -592,12 +592,12 @@
 		 * The following privileges should be granted to jail once
 		 * implemented.
 		 */
-	/* case PRIV_IPC_READ: */
-	/* case PRIV_IPC_WRITE: */
-	/* case PRIV_IPC_EXEC: */
-	/* case PRIV_IPC_ADMIN: */
-	/* case PRIV_IPC_MSGSIZE: */
-	/* case PRIV_MQ_ADMIN: */
+	case PRIV_IPC_READ:
+	case PRIV_IPC_WRITE:
+	case PRIV_IPC_EXEC:
+	case PRIV_IPC_ADMIN:
+	case PRIV_IPC_MSGSIZE:
+	case PRIV_MQ_ADMIN:
 
 		/*
 		 * Jail implements its own inter-process limits, so allow



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200610200032.k9K0WRJl079421>