os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Some 'igor -z' improvements.

Browse source 
Approved by:	gjb (mentor)
This commit is contained in:
Rene Ladan 2013-02-11 00:04:06 +00:00
parent 9222f221d0
commit 8f403828c0
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=40924
1 changed files with 3 additions and 3 deletions

6
en_US.ISO8859-1/books/arch-handbook/jail/chapter.xml
View file

@ -139,7 +139,7 @@ j.ip_number = ntohl(in.s_addr);</programlisting>
</sect3> </sect3>
<sect3> <sect3>
<title>Jailing The Process</title> <title>Jailing the Process</title>
<para>Finally, the userland program jails the process. <para>Finally, the userland program jails the process.
<application>Jail</application> now becomes an imprisoned <application>Jail</application> now becomes an imprisoned
@ -224,7 +224,7 @@ SYSCTL_INT(_security_jail, OID_AUTO, mount_allowed, CTLFLAG_RW,
</sect3> </sect3>
<sect3> <sect3>
<title>&man.jail.2; system call</title> <title>&man.jail.2; System Call</title>
<para>Like all system calls, the &man.jail.2; system call takes <para>Like all system calls, the &man.jail.2; system call takes
two arguments, <literal>struct thread *td</literal> and two arguments, <literal>struct thread *td</literal> and
@ -617,7 +617,7 @@ socreate(int dom, struct socket **aso, int type, int proto,
contains the port, address, length and domain family of the socket contains the port, address, length and domain family of the socket
which is to be bound. Basically, this disallows any processes from which is to be bound. Basically, this disallows any processes from
<application>jail</application> to be able to specify the address <application>jail</application> to be able to specify the address
that doesn't belong to the <application>jail</application> in which that does not belong to the <application>jail</application> in which
the calling process exists.</para> the calling process exists.</para>
<programlisting><filename>/usr/src/sys/netinet/in_pcb.c</filename>: <programlisting><filename>/usr/src/sys/netinet/in_pcb.c</filename>: