From 7340eb44087fe067b0bac9f32cbc07342b5261e1 Mon Sep 17 00:00:00 2001
From: Olivier Certner <olce@FreeBSD.org>
Date: Thu, 4 Jul 2024 11:05:44 +0200
Subject: [PATCH] jail.h: New SYSCTL_JAIL_PARAM_SYS_SUBNODE()

Same as SYSCTL_JAIL_PARAM_SYS_NODE() but allowing another level of
hierarchy.  To be used with MAC policies, so that they can have their
own node under "security.jail.param.mac".

Reviewed by:    jamie
Approved by:    markj (mentor)
MFC after:      5 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D46901

(cherry picked from commit 9f8020e65ba8f2398bf79505037b75670340e5fa)
---
 sys/sys/jail.h | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/sys/sys/jail.h b/sys/sys/jail.h
index fa30a363340..053f68a3673 100644
--- a/sys/sys/jail.h
+++ b/sys/sys/jail.h
@@ -396,6 +396,10 @@ SYSCTL_DECL(_security_jail_param);
 	SYSCTL_JAIL_PARAM_NODE(module, descr);				\
 	SYSCTL_JAIL_PARAM(_##module, , CTLTYPE_INT | (access), "E,jailsys", \
 	    descr)
+#define	SYSCTL_JAIL_PARAM_SYS_SUBNODE(parent, module, access, descr)	\
+	SYSCTL_JAIL_PARAM_SUBNODE(parent, module, descr);		\
+	SYSCTL_JAIL_PARAM(_##parent##_##module, , CTLTYPE_INT | (access), \
+	    "E,jailsys", descr)
 
 /*
  * Kernel support functions for jail().