Jamie Gritton 46571c7c00 From r224286: ... Document the potential for jail escape. From r224615: Always disable mount and unmount for jails with enforce_statfs==2. From r231267: A new jail(8) option "devfs_ruleset" defines the ruleset enforcement for mounting devfs inside jails. A value of -1 disables mounting devfs in jails, a value of zero means no restrictions. Nested jails can only have mounting devfs disabled or inherit parent's enforcement as jails are not allowed to view or manipulate devfs(8) rules. From r232059: To improve control over the use of mount(8) inside a jail(8), introduce a new jail parameter node with the following parameters: allow.mount.devfs: allow mounting the devfs filesystem inside a jail allow.mount.nullfs: allow mounting the nullfs filesystem inside a jail From r232186: allow.mount.zfs: allow mounting the zfs filesystem inside a jail		2012-02-27 22:28:38 +00:00
..
command.c	Improvements in error messages:	2012-02-08 23:51:46 +00:00
config.c	Following r222465:	2011-06-20 23:04:13 +00:00
jail.8	From r224286:	2012-02-27 22:28:38 +00:00
jail.c	Improvements in error messages:	2012-02-08 23:51:46 +00:00
jail.conf.5	Update copyright dates and other whitespacey stuff.	2011-06-17 16:21:03 +00:00
jaillex.l	Update copyright dates and other whitespacey stuff.	2011-06-17 16:21:03 +00:00
jailp.h	Improvements in error messages:	2012-02-08 23:51:46 +00:00
jailparse.y	Update copyright dates and other whitespacey stuff.	2011-06-17 16:21:03 +00:00
Makefile	Following r222465:	2011-06-20 23:04:13 +00:00
state.c	Improvements in error messages:	2012-02-08 23:51:46 +00:00