2 * ----------------------------------------------------------------------------
3 * "THE BEER-WARE LICENSE" (Revision 42):
4 * <phk@FreeBSD.org> wrote this file. As long as you retain this notice you
5 * can do whatever you want with this stuff. If we meet some day, and you think
6 * this stuff is worth it, you can buy me a beer in return. Poul-Henning Kamp
7 * ----------------------------------------------------------------------------
9 * $FreeBSD: src/sys/sys/jail.h,v 1.8.2.2 2000/11/01 17:58:06 rwatson Exp $
10 * $DragonFly: src/sys/sys/jail.h,v 1.12 2008/05/17 18:20:31 dillon Exp $
18 #include <sys/types.h>
21 #include <sys/param.h>
24 #include <sys/queue.h>
27 #include <sys/ucred.h>
37 uint32_t n_ips; /* Number of ips */
38 struct sockaddr_storage *ips;
50 int jail(struct jail *);
57 #ifndef _SYS_NAMECACHE_H_
58 #include <sys/namecache.h>
60 #ifndef _SYS_VARSYM_H_
61 #include <sys/varsym.h>
65 MALLOC_DECLARE(M_PRISON);
70 #if defined(_KERNEL) || defined(_KERNEL_STRUCTURES)
72 #define JAIL_MAX 999999
74 /* Used to store the IPs of the jail */
76 struct jail_ip_storage {
77 struct sockaddr_storage ip;
78 SLIST_ENTRY(jail_ip_storage) entries;
82 * This structure describes a prison. It is pointed to by all struct
83 * proc's of the inmates. pr_ref keeps track of them and is used to
84 * delete the struture when the last inmate is dead.
88 LIST_ENTRY(prison) pr_list; /* all prisons */
89 int pr_id; /* prison id */
90 int pr_ref; /* reference count */
91 struct nchandle pr_root; /* namecache entry of root */
92 char pr_host[MAXHOSTNAMELEN]; /* host name */
93 SLIST_HEAD(iplist, jail_ip_storage) pr_ips; /* list of IP addresses */
94 struct sockaddr_in *local_ip4; /* cache for a loopback ipv4 address */
95 struct sockaddr_in *nonlocal_ip4; /* cache for a non loopback ipv4 address */
96 struct sockaddr_in6 *local_ip6; /* cache for a loopback ipv6 address */
97 struct sockaddr_in6 *nonlocal_ip6; /* cache for a non loopback ipv6 address */
98 void *pr_linux; /* Linux ABI emulation */
99 int pr_securelevel; /* jail securelevel */
100 struct varsymset pr_varsymset; /* jail varsyms */
104 * Sysctl-set variables that determine global jail policy
106 extern int jail_set_hostname_allowed;
107 extern int jail_socket_unixiproute_only;
108 extern int jail_sysvipc_allowed;
109 extern int jail_chflags_allowed;
110 extern int jail_allow_raw_sockets;
112 void prison_hold(struct prison *);
113 void prison_free(struct prison *);
114 int jailed_ip(struct prison *, struct sockaddr *);
116 prison_get_local(struct prison *pr, sa_family_t, struct sockaddr *);
118 prison_get_nonlocal(struct prison *pr, sa_family_t, struct sockaddr *);
119 int prison_priv_check(struct ucred *cred, int priv);
122 * Return 1 if the passed credential is in a jail, otherwise 0.
127 jailed(struct ucred *cred)
129 return(cred->cr_prison != NULL);
132 #endif /* _KERNEL || _KERNEL_STRUCTURES */
133 #endif /* !_SYS_JAIL_H_ */