]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
jail: introduce per jail suser_enabled setting
authorMariusz Zaborski <oshogbo@FreeBSD.org>
Wed, 18 Nov 2020 21:07:08 +0000 (21:07 +0000)
committerMariusz Zaborski <oshogbo@FreeBSD.org>
Wed, 18 Nov 2020 21:07:08 +0000 (21:07 +0000)
commit05e1e482c7db7a2a3163b1308d36a75f30ccbe6a
treee852562ea021be0066fef3a04d0cd7f3a8934a2a
parent21fe9441e13f2d4d710adfc5cf81abc0defb649a
jail: introduce per jail suser_enabled setting

The suser_enable sysctl allows to remove a privileged rights from uid 0.
This change introduce per jail setting which allow to make root a
normal user.

Reviewed by: jamie
Previous version reviewed by: kevans, emaste, markj, me_igalic.co
Discussed with: pjd
Differential Revision: https://reviews.freebsd.org/D27128
sys/kern/kern_jail.c
sys/kern/kern_priv.c
sys/sys/jail.h
usr.sbin/jail/jail.8