jail.h: New SYSCTL_JAIL_PARAM_SYS_SUBNODE()

Same as SYSCTL_JAIL_PARAM_SYS_NODE() but allowing another level of
hierarchy.  To be used with MAC policies, so that they can have their
own node under "security.jail.param.mac".

Reviewed by:    jamie
Approved by:    markj (mentor)
MFC after:      5 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D46901

(cherry picked from commit 9f8020e65b)
This commit is contained in:
Olivier Certner 2024-07-04 11:05:44 +02:00
parent ec661f29c3
commit 7340eb4408
No known key found for this signature in database
GPG key ID: 8CA13040971E2627

View file

@ -396,6 +396,10 @@ SYSCTL_DECL(_security_jail_param);
SYSCTL_JAIL_PARAM_NODE(module, descr); \
SYSCTL_JAIL_PARAM(_##module, , CTLTYPE_INT | (access), "E,jailsys", \
descr)
#define SYSCTL_JAIL_PARAM_SYS_SUBNODE(parent, module, access, descr) \
SYSCTL_JAIL_PARAM_SUBNODE(parent, module, descr); \
SYSCTL_JAIL_PARAM(_##parent##_##module, , CTLTYPE_INT | (access), \
"E,jailsys", descr)
/*
* Kernel support functions for jail().