prison_check(9)

prison_check9

Determine if subjects may see entities according to jail restrictions

Usage

#include <sys/jail.h>

int

prison_check(struct ucred *cred1, struct ucred *cred2);

Overview

This function determines if a subject with credentials cred1 is denied access to subjects or objects with credentials cred2 according to the policy that a subject can see subjects or objects in its own jail or any sub-jail of it.

Return values

The prison_check() function returns ESRCH if cred2 is not in the same jail or a sub-jail of that of cred1. In all other cases, prison_check() returns zero.

Releases

52 releases since FreeBSD 5.3-RELEASE; the text changed 32 times.

  1. 5.3–6.3
  2. 6.4
  3. 7.0
  4. 7.1
  5. 7.2
  6. 7.3
  7. 7.4
  8. 8.0
  9. 8.1
  10. 8.2
  11. 8.3
  12. 8.4
  13. 9.0
  14. 9.1
  15. 9.2
  16. 9.3
  17. 10.0
  18. 10.1
  19. 10.2
  20. 10.3
  21. 10.4
  22. 11.0
  23. 11.1
  24. 11.2
  25. 11.3
  26. 11.4
  27. 12.0
  28. 12.1
  29. 12.2
  30. 12.3
  31. 12.4
  32. 13.0–13.2
  33. 13.3–16.0

From base 16.0-CURRENT-20261027-61c70dc16a79 in FreeBSD 16.0-CURRENT (2026-10-27). Parsed by carta from the page's mdoc source.