mirror_zfs/module/os/freebsd
Allan Jude 6219190d7f Restrict visibility of per-dataset kstats inside FreeBSD jails
When inside a jail, visibility on datasets not "jailed" to the
jail is restricted. However, it was possible to enumerate all
datasets in the pool by looking at the kstats sysctl MIB.

Only the kstats corresponding to datasets that the user has
visibility on are accessible now.

Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Richard Yao <richard.yao@alumni.stonybrook.edu>
Signed-off-by: Allan Jude <allan@klarasystems.com>
Closes #14254
2023-01-19 12:50:36 -08:00
..
spl Restrict visibility of per-dataset kstats inside FreeBSD jails 2023-01-19 12:50:36 -08:00
zfs FreeBSD: zfs_register_callbacks() must implement error check correctly 2023-01-19 12:50:36 -08:00