mirror_zfs/module/os/freebsd
Allan Jude f900279e6d
Restrict visibility of per-dataset kstats inside FreeBSD jails
When inside a jail, visibility on datasets not "jailed" to the
jail is restricted. However, it was possible to enumerate all
datasets in the pool by looking at the kstats sysctl MIB.

Only the kstats corresponding to datasets that the user has
visibility on are accessible now.

Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Richard Yao <richard.yao@alumni.stonybrook.edu>
Signed-off-by: Allan Jude <allan@klarasystems.com>
Closes #14254
2022-12-09 11:04:29 -08:00
..
spl Restrict visibility of per-dataset kstats inside FreeBSD jails 2022-12-09 11:04:29 -08:00
zfs FreeBSD: zfs_register_callbacks() must implement error check correctly 2022-12-05 10:16:50 -08:00