sys/kern/kern_jail.c

496 	struct prison *pr, *deadpr, *mypr, *ppr, *tpr;
1089 			FOREACH_PRISON_CHILD(ppr, tpr) {
1090 				if (tpr != pr && tpr->pr_ref > 0 &&
1091 				    !strcmp(tpr->pr_name + pnamelen, namelc)) {
1094 						mtx_lock(&tpr->pr_mtx);
1095 						if (tpr->pr_ref > 0) {
1100 							if (tpr->pr_uref > 0) {
1101 								pr = tpr;
1104 							deadpr = tpr;
1106 						mtx_unlock(&tpr->pr_mtx);
1107 					} else if (tpr->pr_uref > 0) {
1157 		for (tpr = mypr; tpr != NULL; tpr = tpr->pr_parent)
1158 			if (tpr->pr_childcount >= tpr->pr_childmax) {
1182 			TAILQ_FOREACH(tpr, &allprison, pr_list) {
1183 				if (tpr->pr_id < jid)
1185 				if (tpr->pr_id > jid || tpr->pr_ref == 0) {
1186 					TAILQ_INSERT_BEFORE(tpr, pr, pr_list);
1207 			TAILQ_FOREACH(tpr, &allprison, pr_list)
1208 				if (tpr->pr_id >= jid) {
1209 					TAILQ_INSERT_BEFORE(tpr, pr, pr_list);
1213 		if (tpr == NULL)
1216 		for (tpr = ppr; tpr != NULL; tpr = tpr->pr_parent)
1217 			tpr->pr_childcount++;
1429 		FOREACH_PRISON_DESCENDANT(tppr, tpr, descend) {
1430 			if (tpr == pr ||
1432 			    (tpr != tppr && (tpr->pr_flags & PR_VNET)) ||
1434 			    tpr->pr_uref == 0) {
1438 			if (!(tpr->pr_flags & PR_IP4_USER))
1441 			if (tpr->pr_ip4 == NULL ||
1442 			    (ip4s == 1 && tpr->pr_ip4s == 1))
1445 				if (prison_check_ip4_locked(tpr, &ip4[ii]) ==
1497 		FOREACH_PRISON_DESCENDANT(tppr, tpr, descend) {
1498 			if (tpr == pr ||
1500 			    (tpr != tppr && (tpr->pr_flags & PR_VNET)) ||
1502 			    tpr->pr_uref == 0) {
1506 			if (!(tpr->pr_flags & PR_IP6_USER))
1509 			if (tpr->pr_ip6 == NULL ||
1510 			    (ip6s == 1 && tpr->pr_ip6s == 1))
1513 				if (prison_check_ip6_locked(tpr, &ip6[ii]) ==
1550 		FOREACH_PRISON_DESCENDANT(pr, tpr, descend) {
1551 			if (strlen(tpr->pr_name) + (namelen - onamelen) >=
1596 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {
1598 			if (tpr->pr_flags & PR_VNET) {
1603 			if (prison_restrict_ip4(tpr, NULL)) {
1618 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {
1620 			if (tpr->pr_flags & PR_VNET) {
1625 			if (prison_restrict_ip6(tpr, NULL)) {
1635 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend)
1636 			if (tpr->pr_securelevel < slevel)
1637 				tpr->pr_securelevel = slevel;
1642 		FOREACH_PRISON_DESCENDANT_LOCKED_LEVEL(pr, tpr, descend, level)
1643 			if (tpr->pr_childmax > childmax - level)
1644 				tpr->pr_childmax = childmax > level
1650 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend)
1651 			if (tpr->pr_enforce_statfs < enforce)
1652 				tpr->pr_enforce_statfs = enforce;
1657 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend)
1658 			tpr->pr_devfs_rsnum = rsnum;
1667 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {
1668 			bcopy(tpr->pr_name + onamelen, tpr->pr_name + namelen,
1669 			    strlen(tpr->pr_name + onamelen) + 1);
1670 			bcopy(pr->pr_name, tpr->pr_name, namelen);
1710 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {
1711 			if (tpr->pr_flags & PR_HOST)
1715 					strlcpy(tpr->pr_hostname,
1717 					    sizeof(tpr->pr_hostname));
1719 					strlcpy(tpr->pr_domainname,
1721 					    sizeof(tpr->pr_domainname));
1723 					strlcpy(tpr->pr_hostuuid,
1725 					    sizeof(tpr->pr_hostuuid));
1727 					tpr->pr_hostid = hid;
1733 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend)
1734 			tpr->pr_allow &= ~tallow;
1771 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {
1773 			if (tpr->pr_flags & PR_VNET) {
1778 			if (prison_restrict_ip4(tpr, ip4)) {
1794 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {
1796 			if (tpr->pr_flags & PR_VNET) {
1801 			if (prison_restrict_ip6(tpr, ip6)) {
2238 	struct prison *pr, *cpr, *lpr, *tpr;
2260 				tpr = cpr;
2264 				tpr = NULL;
2272 			lpr = tpr;
2608 	struct prison *ppr, *tpr;
2669 		for (tpr = ppr; tpr != NULL; tpr = tpr->pr_parent)
2670 			tpr->pr_childcount--;