Date: Sun, 27 Jun 2004 23:40:48 -0700 (PDT) From: Julian Elischer <julian@elischer.org> To: Pawel Jakub Dawidek <pjd@FreeBSD.org> Cc: bzeeb+freebsd@zabbadoz.net Subject: Re: jail getfsstat patches. Message-ID: <Pine.BSF.4.21.0406272339040.19712-100000@InterJet.elischer.org> In-Reply-To: <20040627101951.GJ12007@darkness.comp.waw.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 27 Jun 2004, Pawel Jakub Dawidek wrote: > On Sun, Jun 27, 2004 at 08:59:32AM +0200, Pawel Jakub Dawidek wrote: > +> If you give me a few days (maybe I'll be ready today) I'll try to prepare > +> patch to commit so we can review it together. > > Ok, here it goes: > > http://people.freebsd.org/~pjd/patches/jail_enforce_statfs.patch > > As you can see, all mac_check_mount_stat() calls are placed after a > prison_canseemount() call, so we can considern moving mac_check_mount_stat() > to prison_canseemount() function. > The patch looks good to me but I don't have a 5.x machine with jails at the moment (I may try set up a small jail tomorrow to test it). do you have a 4.x version? I have been testing the kernel module version for 4.x and it seems to work as advertised..
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0406272339040.19712-100000>