git: ba99013a4464 - main - tarfs: allow mounting inside jails
Siva Mahadevan <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.cvs.src |
|---|---|
| Message-ID | <6a868094.383bf.7894182a__1210.57018857158$1787199659$gmane$org@gitrepo.freebsd.org> |
The branch main has been updated by siva: URL: https://cgit.FreeBSD.org/src/commit/?id=ba99013a4464c2f3e8cc0a89c23d03810dc2d37e commit ba99013a4464c2f3e8cc0a89c23d03810dc2d37e Author: Siva Mahadevan <[email protected]> AuthorDate: 2026-08-20 04:18:43 +0000 Commit: Siva Mahadevan <[email protected]> CommitDate: 2026-08-20 04:19:40 +0000 tarfs: allow mounting inside jails Reviewed by: des MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D58833 --- sys/fs/tarfs/tarfs_vfsops.c | 2 +- usr.sbin/jail/jail.8 | 10 +++++++++- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/sys/fs/tarfs/tarfs_vfsops.c b/sys/fs/tarfs/tarfs_vfsops.c index 8aa261c88da9..8c15fe684e4c 100644 --- a/sys/fs/tarfs/tarfs_vfsops.c +++ b/sys/fs/tarfs/tarfs_vfsops.c @@ -1236,6 +1236,6 @@ static struct vfsops tarfs_vfsops = { .vfs_unmount = tarfs_unmount, .vfs_vget = tarfs_vget, }; -VFS_SET(tarfs_vfsops, tarfs, VFCF_READONLY); +VFS_SET(tarfs_vfsops, tarfs, VFCF_JAIL | VFCF_READONLY); MODULE_VERSION(tarfs, 1); MODULE_DEPEND(tarfs, xz, 1, 1, 1); diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8 index 3fc396824b58..550e62f235c3 100644 --- a/usr.sbin/jail/jail.8 +++ b/usr.sbin/jail/jail.8 @@ -26,7 +26,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd December 4, 2025 +.Dd August 13, 2026 .Dt JAIL 8 .Os .Sh NAME @@ -807,6 +807,14 @@ This permission is effective only together with and only when .Va enforce_statfs is set to a value lower than 2. +.It Va allow.mount.tarfs +privileged users inside the jail will be able to mount and unmount the +tarfs file system. +This permission is effective only together with +.Va allow.mount +and only when +.Va enforce_statfs +is set to a value lower than 2. .It Va allow.mount.tmpfs privileged users inside the jail will be able to mount and unmount the tmpfs file system.