]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
jail: introduce per jail suser_enabled setting
authoroshogbo <oshogbo@FreeBSD.org>
Wed, 18 Nov 2020 21:07:08 +0000 (21:07 +0000)
committeroshogbo <oshogbo@FreeBSD.org>
Wed, 18 Nov 2020 21:07:08 +0000 (21:07 +0000)
commit773bd4ba545450138d1c3a3a33243652d55e4dde
treee852562ea021be0066fef3a04d0cd7f3a8934a2a
parentf24ab30d0c23d102276a83d17f4d3d9cb543eccb
jail: introduce per jail suser_enabled setting

The suser_enable sysctl allows to remove a privileged rights from uid 0.
This change introduce per jail setting which allow to make root a
normal user.

Reviewed by: jamie
Previous version reviewed by: kevans, emaste, markj, me_igalic.co
Discussed with: pjd
Differential Revision: https://reviews.freebsd.org/D27128
sys/kern/kern_jail.c
sys/kern/kern_priv.c
sys/sys/jail.h
usr.sbin/jail/jail.8