On Tue, May 26, 2009 at 04:35:04PM +0400, Menshikov Konstantin wrote: > Kostik Belousov wrote: > >On Tue, May 26, 2009 at 10:32:24AM +0400, Menshikov Konstantin wrote: > >>In structure prison it is added structures containing disk quotas and > >>usage. > >>At start Jail, we calculate the size root path and number of files in > >>it, thus receiving current use of a disk. > >>In functions of allocation of disk blocks and inode, we check quotas and > >>we increase current use. > >> > >UFS cannot determine whether the new allocation goes under the jail > >root or not. > > > Yes. But jail cannot allocate block and inode above root path. In > allocation functions, whether for example ffs_alloc we have access to > ucred process and we can check up there is a process in jail.
Yes, you can check this for jailed process. Think about non-jailed processes that can do allocation below the jail root.
pgp5HrqZs2NQS.pgp
Description: PGP signature
