Hello hackers. I've prepare a quite handy patch.
This patch adds sysctls for every jails. Sysctls are created automatically
when jail is created and destroyed when jail is removed.
If jail with ID 3 is created we got new sysctls:
security.jails.3.path (RD)
security.jails.3.host (RW)
security.jails.3.ip (RD)
security.jails.3.securelevel (RW)
Patch add also two flags to sysctls:
CTLFLAG_USERINV - sysctl is invisible for unprivileged users
CTLFLAG_JAILINV - sysctl is invisible in jail environment
So newly created sysctls aren't visable in jails.
it also provides changing host of running jail and its securelevel.
Jail's securelevel could be even downgraded if it stay bigger or equal
to main securelevel.
With this functionality jls(8) could be rewritten to use this and xprison
struct could be removed from kernel.
Patch against FreeBSD 5.1-CURRENT, kern.osreldate: 501102.
It is avaliable at:
http://garage.freebsd.pl/patches/jail_sysctls.patch
--
Pawel Jakub Dawidek [EMAIL PROTECTED]
UNIX Systems Programmer/Administrator http://garage.freebsd.pl
Am I Evil? Yes, I Am! http://cerber.sourceforge.net
pgp00000.pgp
Description: PGP signature
