Robert Watson 91421ba234 o Move per-process jail pointer (p->pr_prison) to inside of the subject ... credential structure, ucred (cr->cr_prison). o Allow jail inheritence to be a function of credential inheritence. o Abstract prison structure reference counting behind pr_hold() and pr_free(), invoked by the similarly named credential reference management functions, removing this code from per-ABI fork/exit code. o Modify various jail() functions to use struct ucred arguments instead of struct proc arguments. o Introduce jailed() function to determine if a credential is jailed, rather than directly checking pointers all over the place. o Convert PRISON_CHECK() macro to prison_check() function. o Move jail() function prototypes to jail.h. o Emulate the P_JAILED flag in fill_kinfo_proc() and no longer set the flag in the process flags field itself. o Eliminate that "const" qualifier from suser/p_can/etc to reflect mutex use. Notes: o Some further cleanup of the linux/jail code is still required. o It's now possible to consider resolving some of the process vs credential based permission checking confusion in the socket code. o Mutex protection of struct prison is still not present, and is required to protect the reference count plus some fields in the structure. Reviewed by: freebsd-arch Obtained from: TrustedBSD Project		2001-02-21 06:39:57 +00:00
..
deadfs	Change and clean the mutex lock interface.	2001-02-09 06:11:45 +00:00
fdesc
fifofs	Extend kqueue down to the device layer.	2001-02-15 16:34:11 +00:00
nullfs	Change and clean the mutex lock interface.	2001-02-09 06:11:45 +00:00
portal
procfs	o Move per-process jail pointer (p->pr_prison) to inside of the subject	2001-02-21 06:39:57 +00:00
specfs	Extend kqueue down to the device layer.	2001-02-15 16:34:11 +00:00
umapfs
union