From owner-cvs-src@FreeBSD.ORG  Tue Jan 31 17:17:45 2006
Return-Path: <owner-cvs-src@FreeBSD.ORG>
X-Original-To: cvs-src@FreeBSD.org
Delivered-To: cvs-src@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A404F16A420;
	Tue, 31 Jan 2006 17:17:45 +0000 (GMT)
	(envelope-from csjp@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5EE4043D45;
	Tue, 31 Jan 2006 17:17:45 +0000 (GMT)
	(envelope-from csjp@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k0VHHjHv058584;
	Tue, 31 Jan 2006 17:17:45 GMT
	(envelope-from csjp@repoman.freebsd.org)
Received: (from csjp@localhost)
	by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k0VHHjve058583;
	Tue, 31 Jan 2006 17:17:45 GMT (envelope-from csjp)
Message-Id: <200601311717.k0VHHjve058583@repoman.freebsd.org>
From: "Christian S.J. Peron" <csjp@FreeBSD.org>
Date: Tue, 31 Jan 2006 17:17:45 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/kern tty_pty.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jan 2006 17:17:45 -0000

csjp        2006-01-31 17:17:45 UTC

  FreeBSD src repository

  Modified files:
    sys/kern             tty_pty.c 
  Log:
  Allow root in the host environment to open ptys within jailed environments.
  This logic change was introduced in revision 1.74:
  
  Correct an oversight in jail() that allowed processes in jail to access
  ptys in ways that might be unethical, especially towards processes not in
  jail, or in other jails.
  
  It should be fine to allow root in the host environment to do this. This
  allows for more effective monitoring of prisons from the host environment.
  
  Discussed with: rwatson
  MFC after:      1 week
  
  Revision  Changes    Path
  1.144     +1 -1      src/sys/kern/tty_pty.c