From owner-freebsd-stable Sat Oct 9 8: 2:36 1999 Delivered-To: freebsd-stable@freebsd.org Received: from gw.nectar.com (gw.nectar.com [209.98.143.44]) by hub.freebsd.org (Postfix) with ESMTP id 8A05514E5E for ; Sat, 9 Oct 1999 08:02:32 -0700 (PDT) (envelope-from nectar@nectar.com) Received: from bone.nectar.com (bone.nectar.com [10.0.0.105]) by gw.nectar.com (Postfix) with ESMTP id 29713C006 for ; Sat, 9 Oct 1999 10:02:32 -0500 (CDT) Received: from localhost (localhost [127.0.0.1]) by bone.nectar.com (Postfix) with ESMTP id 7BC7B1D87 for ; Sat, 9 Oct 1999 10:02:31 -0500 (CDT) To: freebsd-stable@freebsd.org Subject: merging current's jail functionality to stable From: Jacques Vidrine X-Mailer: Mew version 1.94 on XEmacs 21.1 (20 Minutes to Nikko) X-PGP-RSAfprint: 00 F9 E6 A2 C5 4D 0A 76 26 8B 8B 57 73 D0 DE EE X-PGP-RSAkey: http://www.nectar.com/nectar-rsa.txt X-PGP-DSSfprint: AB2F 8D71 A4F4 467D 352E 8A41 5D79 22E4 71A2 8C73 X-PGP-DHfprint: 2D50 12E5 AB38 60BA AF4B 0778 7242 4460 1C32 F6B1 X-PGP-DH-DSSkey: http://www.nectar.com/nectar-dh-dss.txt Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: <19991009100231S.nectar@nectar.com> Date: Sat, 09 Oct 1999 10:02:31 -0500 X-Dispatcher: imput version 990905(IM130) Lines: 34 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hello everyone, I have backported Poul-Henning Kamp's jail functionality to 3.3-STABLE (see http://www.nectar.com/freebsd/jail.html for the patches, man pages, and a short description of jail) at the request of several users. I intend to commit these to -STABLE in the near future, but PHK brought up a concern. These patches change the interface of suser(9). All uses of suser in the source tree have been updated, but 3rd-party KLDs, at least, would be broken by this change. I don't use any 3rd-part KLDs. I'd like to hear from folks who do. As I see it, there are these options: = Damn the binary compatibility. Go ahead and commit it. Inform any known vendors about the change and encourage them to make the trivial updates needed. = Wrap these changes with ``options JAIL''. There are over 130 files that would need ``#ifdef JAIL'' as it is. This could be reduced, but any way you slice it, a lot of pollutant would have to be introduced. = Don't commit it, it is too much trouble. = Use magic on the 3rd-party KLDs so that calls of suser are folded to suser_xxx. This can't be perfect, because we'll lose the accounting info parameter, but it might be better than breaking the binary. This latter option is very intriguing to me. I currently lack clue about KLDs however. I'll look at them this weekend. Any feedback would be welcome! Jacques Vidrine / n@nectar.com / nectar@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message