The branch stable/13 has been updated by olce:
URL:
https://cgit.FreeBSD.org/src/commit/?id=ae2383c0dd16e06991a0462758107e0489ec53a7
commit ae2383c0dd16e06991a0462758107e0489ec53a7
Author: Olivier Certner <o...@freebsd.org>
AuthorDate: 2024-07-03 14:30:19 +0000
Commit: Olivier Certner <o...@freebsd.org>
CommitDate: 2025-01-17 12:24:49 +0000
MAC: Define a common 'mac' node for MAC's jail parameters
To be used by MAC/do.
Reviewed by: jamie
Approved by: markj (mentor)
MFC after: 5 days
Relnotes: yes
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D46899
(cherry picked from commit 5041b20503dbb442cc9ebd0a6e4db26905102c72)
---
sys/security/mac/mac_framework.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/sys/security/mac/mac_framework.c b/sys/security/mac/mac_framework.c
index 342389606430..ae18dead6840 100644
--- a/sys/security/mac/mac_framework.c
+++ b/sys/security/mac/mac_framework.c
@@ -72,6 +72,7 @@
#include <sys/param.h>
#include <sys/systm.h>
#include <sys/condvar.h>
+#include <sys/jail.h>
#include <sys/kernel.h>
#include <sys/lock.h>
#include <sys/mac.h>
@@ -105,6 +106,11 @@ SDT_PROBE_DEFINE1(mac, , policy, unregister,
SYSCTL_NODE(_security, OID_AUTO, mac, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
"TrustedBSD MAC policy controls");
+/*
+ * Root sysctl node for MAC modules' jail parameters.
+ */
+SYSCTL_JAIL_PARAM_NODE(mac, "Jail parameters for MAC policy controls");
+
/*
* Declare that the kernel provides a specific version of MAC support.
* This permits modules to refuse to be loaded if the necessary support isn't
