On Sun, Jun 27, 2004 at 11:40:48PM -0700, Julian Elischer wrote: +> > On Sun, Jun 27, 2004 at 08:59:32AM +0200, Pawel Jakub Dawidek wrote: +> > +> If you give me a few days (maybe I'll be ready today) I'll try to prepare +> > +> patch to commit so we can review it together. +> > +> > Ok, here it goes: +> > +> > http://people.freebsd.org/~pjd/patches/jail_enforce_statfs.patch +> > +> > As you can see, all mac_check_mount_stat() calls are placed after a +> > prison_canseemount() call, so we can considern moving mac_check_mount_stat() +> > to prison_canseemount() function. +> > +> +> The patch looks good to me but I don't have a 5.x machine with jails at +> the moment (I may try set up a small jail tomorrow to test it). +> +> do you have a 4.x version? I don't have 4.x boxes, so I can't prepare one for 4.x. Could you try to port it? It should be easy. -- Pawel Jakub Dawidek http://www.FreeBSD.org pjd_at_FreeBSD.org http://garage.freebsd.pl FreeBSD committer Am I Evil? Yes, I Am!
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:59 UTC