zfs/module/os
Allan Jude 6219190d7f Restrict visibility of per-dataset kstats inside FreeBSD jails
When inside a jail, visibility on datasets not "jailed" to the
jail is restricted. However, it was possible to enumerate all
datasets in the pool by looking at the kstats sysctl MIB.

Only the kstats corresponding to datasets that the user has
visibility on are accessible now.

Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Richard Yao <richard.yao@alumni.stonybrook.edu>
Signed-off-by: Allan Jude <allan@klarasystems.com>
Closes #14254
2023-01-19 12:50:36 -08:00
..
freebsd Restrict visibility of per-dataset kstats inside FreeBSD jails 2023-01-19 12:50:36 -08:00
linux linux 6.2 compat: get_acl() got moved to get_inode_acl() in 6.2 2023-01-10 08:43:49 -08:00