The Design and Implementation of the FreeBSD Operating System, Second Edition
Now available: The Design and Implementation of the FreeBSD Operating System (Second Edition)


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]

FreeBSD/Linux Kernel Cross Reference
sys/sys/jail.h

Version: -  FREEBSD  -  FREEBSD-12-STABLE  -  FREEBSD-12-0  -  FREEBSD-11-STABLE  -  FREEBSD-11-2  -  FREEBSD-11-1  -  FREEBSD-11-0  -  FREEBSD-10-STABLE  -  FREEBSD-10-4  -  FREEBSD-10-3  -  FREEBSD-10-2  -  FREEBSD-10-1  -  FREEBSD-10-0  -  FREEBSD-9-STABLE  -  FREEBSD-9-3  -  FREEBSD-9-2  -  FREEBSD-9-1  -  FREEBSD-9-0  -  FREEBSD-8-STABLE  -  FREEBSD-8-4  -  FREEBSD-8-3  -  FREEBSD-8-2  -  FREEBSD-8-1  -  FREEBSD-8-0  -  FREEBSD-7-STABLE  -  FREEBSD-7-4  -  FREEBSD-7-3  -  FREEBSD-7-2  -  FREEBSD-7-1  -  FREEBSD-7-0  -  FREEBSD-6-STABLE  -  FREEBSD-6-4  -  FREEBSD-6-3  -  FREEBSD-6-2  -  FREEBSD-6-1  -  FREEBSD-6-0  -  FREEBSD-5-STABLE  -  FREEBSD-5-5  -  FREEBSD-5-4  -  FREEBSD-5-3  -  FREEBSD-5-2  -  FREEBSD-5-1  -  FREEBSD-5-0  -  FREEBSD-4-STABLE  -  FREEBSD-3-STABLE  -  FREEBSD22  -  linux-2.6  -  linux-2.4.22  -  MK83  -  MK84  -  PLAN9  -  DFBSD  -  NETBSD  -  NETBSD5  -  NETBSD4  -  NETBSD3  -  NETBSD20  -  OPENBSD  -  xnu-517  -  xnu-792  -  xnu-792.6.70  -  xnu-1228  -  xnu-1456.1.26  -  xnu-1699.24.8  -  xnu-2050.18.24  -  OPENSOLARIS  -  minix-3-1-1 
SearchContext: -  none  -  3  -  10 

    1 /*
    2  * ----------------------------------------------------------------------------
    3  * "THE BEER-WARE LICENSE" (Revision 42):
    4  * <phk@FreeBSD.org> wrote this file.  As long as you retain this notice you
    5  * can do whatever you want with this stuff. If we meet some day, and you think
    6  * this stuff is worth it, you can buy me a beer in return.   Poul-Henning Kamp
    7  * ----------------------------------------------------------------------------
    8  *
    9  * $FreeBSD: releng/5.3/sys/sys/jail.h 136588 2004-10-16 08:43:07Z cvs2svn $
   10  *
   11  */
   12 
   13 #ifndef _SYS_JAIL_H_
   14 #define _SYS_JAIL_H_
   15 
   16 struct jail {
   17         u_int32_t       version;
   18         char            *path;
   19         char            *hostname;
   20         u_int32_t       ip_number;
   21 };
   22 
   23 struct xprison {
   24         int              pr_version;
   25         int              pr_id;
   26         char             pr_path[MAXPATHLEN];
   27         char             pr_host[MAXHOSTNAMELEN];
   28         u_int32_t        pr_ip;
   29 };
   30 #define XPRISON_VERSION 1
   31 
   32 #ifndef _KERNEL
   33 
   34 int jail(struct jail *);
   35 int jail_attach(int);
   36 
   37 #else /* _KERNEL */
   38 
   39 #include <sys/queue.h>
   40 #include <sys/_lock.h>
   41 #include <sys/_mutex.h>
   42 #include <sys/_task.h>
   43 
   44 #define JAIL_MAX        999999
   45 
   46 #ifdef MALLOC_DECLARE
   47 MALLOC_DECLARE(M_PRISON);
   48 #endif
   49 
   50 /*
   51  * This structure describes a prison.  It is pointed to by all struct
   52  * ucreds's of the inmates.  pr_ref keeps track of them and is used to
   53  * delete the struture when the last inmate is dead.
   54  *
   55  * Lock key:
   56  *   (a) allprison_mutex
   57  *   (p) locked by pr_mutex
   58  *   (c) set only during creation before the structure is shared, no mutex
   59  *       required to read
   60  *   (d) set only during destruction of jail, no mutex needed
   61  */
   62 struct prison {
   63         LIST_ENTRY(prison) pr_list;                     /* (a) all prisons */
   64         int              pr_id;                         /* (c) prison id */
   65         int              pr_ref;                        /* (p) refcount */
   66         char             pr_path[MAXPATHLEN];           /* (c) chroot path */
   67         struct vnode    *pr_root;                       /* (c) vnode to rdir */
   68         char             pr_host[MAXHOSTNAMELEN];       /* (p) jail hostname */
   69         u_int32_t        pr_ip;                         /* (c) ip addr host */
   70         void            *pr_linux;                      /* (p) linux abi */
   71         int              pr_securelevel;                /* (p) securelevel */
   72         struct task      pr_task;                       /* (d) destroy task */
   73         struct mtx       pr_mtx;
   74 };
   75 
   76 /*
   77  * Sysctl-set variables that determine global jail policy
   78  *
   79  * XXX MIB entries will need to be protected by a mutex.
   80  */
   81 extern int      jail_set_hostname_allowed;
   82 extern int      jail_socket_unixiproute_only;
   83 extern int      jail_sysvipc_allowed;
   84 extern int      jail_getfsstat_jailrootonly;
   85 extern int      jail_allow_raw_sockets;
   86 
   87 LIST_HEAD(prisonlist, prison);
   88 extern struct   prisonlist allprison;
   89 
   90 /*
   91  * Kernel support functions for jail().
   92  */
   93 struct ucred;
   94 struct mount;
   95 struct sockaddr;
   96 int jailed(struct ucred *cred);
   97 void getcredhostname(struct ucred *cred, char *, size_t);
   98 int prison_check(struct ucred *cred1, struct ucred *cred2);
   99 int prison_check_mount(struct ucred *cred, struct mount *mp);
  100 void prison_free(struct prison *pr);
  101 u_int32_t prison_getip(struct ucred *cred);
  102 void prison_hold(struct prison *pr);
  103 int prison_if(struct ucred *cred, struct sockaddr *sa);
  104 int prison_ip(struct ucred *cred, int flag, u_int32_t *ip);
  105 void prison_remote_ip(struct ucred *cred, int flags, u_int32_t *ip);
  106 
  107 #endif /* !_KERNEL */
  108 #endif /* !_SYS_JAIL_H_ */

Cache object: fdb4d7e16bb53654593ae05cca876b50


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]


This page is part of the FreeBSD/Linux Linux Kernel Cross-Reference, and was automatically generated using a modified version of the LXR engine.