Overview

Project website docs.freebsd.org/en
Translation license BSD 2-Clause "Simplified" License
Translation process
  • Translations can be made directly.
  • Translation suggestions can be made.
  • Only chosen users can contribute.
  • The translation uses bilingual files.
File mask documentation/content/*/books/arch-handbook/jail/_index.po
Translation file Download documentation/content/es/books/arch-handbook/jail/_index.po
Last change July 27, 2023, 12:04 p.m.
Last author Fernando Apesteguía

String statistics

Strings percent Hosted strings Words percent Hosted words Characters percent Hosted characters
Total 92 2,702 20,132
Translated 100% 92 100% 2,702 100% 20,132
Needs editing 0% 0 0% 0 0% 0
Read-only 0% 0 0% 0 0% 0
Failing checks 1% 1 1% 1 1% 10
Strings with suggestions 0% 0 0% 0 0% 0
Untranslated strings 0% 0 0% 0 0% 0
Last 12 months Previous

Activity in last 12 months

0 changes 0 changes 1 change 0 changes 1 change 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 91 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes
Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov

Quick numbers

2,702
Hosted words
92
Hosted strings
100%
Translated
0
Contributors
and previous 30 days

Trends of last 30 days

—
Hosted words
+100%
—
Hosted strings
+100%
—
Translated
+100%
—
Contributors
—
User avatar None

Committed changes

Documentation / books/arch-handbook/jail/_index — Spanish

Committed changes 4 months ago
User avatar fernape

Translation changed

Documentation / books/arch-handbook/jail/_index — Spanish

/usr/include/sys/jail.h:
struct prison {
LIST_ENTRY(prison) pr_list; /* (a) all prisons */
int pr_id; /* (c) prison id */
int pr_ref; /* (p) refcount */
char pr_path[MAXPATHLEN]; /* (c) chroot path */
struct vnode *pr_root; /* (c) vnode to rdir */
char pr_host[MAXHOSTNAMELEN]; /* (p) jail hostname */
u_int32_t pr_ip; /* (c) ip addr host */
void *pr_linux; /* (p) linux abi */
int pr_securelevel; /* (p) securelevel */
struct task pr_task; /* (d) destroy task */
struct mtx pr_mtx;
void **pr_slots; /* (p) additional data */
};
/usr/include/sys/jail.h:
struct prison {
LIST_ENTRY(prison) pr_list; /* (a) all prisons */
int pr_id; /* (c) prison id */
int pr_ref; /* (p) refcount */
char pr_path[MAXPATHLEN]; /* (c) chroot path */
struct vnode *pr_root; /* (c) vnode to rdir */
char pr_host[MAXHOSTNAMELEN]; /* (p) jail hostname */
u_int32_t pr_ip; /* (c) ip addr host */
void *pr_linux; /* (p) linux abi */
int pr_securelevel; /* (p) securelevel */
struct task pr_task; /* (d) destroy task */
struct mtx pr_mtx;
void **pr_slots; /* (p) additional data */
};
4 months ago
User avatar fernape

New translation

Documentation / books/arch-handbook/jail/_index — Spanish

/usr/src/sys/ufs/ufs/ufs_vnops.c:
static int
ufs_setattr(ap)
...
{
...
if (!priv_check_cred(cred, PRIV_VFS_SYSFLAGS, 0)) {
if (ip->i_flags
& (SF_NOUNLINK | SF_IMMUTABLE | SF_APPEND)) {
error = securelevel_gt(cred, 0);
if (error)
return (error);
}
...
}
}
/usr/src/sys/kern/kern_priv.c
int
priv_check_cred(struct ucred *cred, int priv, int flags)
{
...
error = prison_priv_check(cred, priv);
if (error)
return (error);
...
}
/usr/src/sys/kern/kern_jail.c
int
prison_priv_check(struct ucred *cred, int priv)
{
...
switch (priv) {
...
case PRIV_VFS_SYSFLAGS:
if (jail_chflags_allowed)
return (0);
else
return (EPERM);
...
}
...
}
/usr/src/sys/ufs/ufs/ufs_vnops.c:
static int
ufs_setattr(ap)
...
{
...
if (!priv_check_cred(cred, PRIV_VFS_SYSFLAGS, 0)) {
if (ip->i_flags
& (SF_NOUNLINK | SF_IMMUTABLE | SF_APPEND)) {
error = securelevel_gt(cred, 0);
if (error)
return (error);
}
...
}
}
/usr/src/sys/kern/kern_priv.c
int
priv_check_cred(struct ucred *cred, int priv, int flags)
{
...
error = prison_priv_check(cred, priv);
if (error)
return (error);
...
}
/usr/src/sys/kern/kern_jail.c
int
prison_priv_check(struct ucred *cred, int priv)
{
...
switch (priv) {
...
case PRIV_VFS_SYSFLAGS:
if (jail_chflags_allowed)
return (0);
else
return (EPERM);
...
}
...
}
4 months ago
User avatar fernape

New translation

Documentation / books/arch-handbook/jail/_index — Spanish

Even `root` users within the jail are not allowed to unset or modify any file flags, such as immutable, append-only, and undeleteable flags, if the securelevel is greater than 0.
Ni siquiera a los usuarios `root` de un jail se les permite cambiar ningún flag de fichero, como el flag de sólo lectura, sólo añadir, y flags de no borrado, si el securelevel es mayor que 0.
4 months ago
User avatar fernape

New translation

Documentation / books/arch-handbook/jail/_index — Spanish

if (!jailed(cred))
return (0);
if (flag)
tmp = *ip;
else
tmp = ntohl(*ip);
if (tmp == INADDR_ANY) {
if (flag)
*ip = cred->cr_prison->pr_ip;
else
*ip = htonl(cred->cr_prison->pr_ip);
return (0);
}
if (tmp == INADDR_LOOPBACK) {
if (flag)
*ip = cred->cr_prison->pr_ip;
else
*ip = htonl(cred->cr_prison->pr_ip);
return (0);
}
if (cred->cr_prison->pr_ip != tmp)
return (1);
return (0);
}
if (!jailed(cred))
return (0);
if (flag)
tmp = *ip;
else
tmp = ntohl(*ip);
if (tmp == INADDR_ANY) {
if (flag)
*ip = cred->cr_prison->pr_ip;
else
*ip = htonl(cred->cr_prison->pr_ip);
return (0);
}
if (tmp == INADDR_LOOPBACK) {
if (flag)
*ip = cred->cr_prison->pr_ip;
else
*ip = htonl(cred->cr_prison->pr_ip);
return (0);
}
if (cred->cr_prison->pr_ip != tmp)
return (1);
return (0);
}
4 months ago
User avatar fernape

New translation

Documentation / books/arch-handbook/jail/_index — Spanish

/usr/src/sys/kern/kern_jail.c:
int
prison_ip(struct ucred *cred, int flag, u_int32_t *ip)
{
u_int32_t tmp;
/usr/src/sys/kern/kern_jail.c:
int
prison_ip(struct ucred *cred, int flag, u_int32_t *ip)
{
u_int32_t tmp;
4 months ago
User avatar fernape

New translation

Documentation / books/arch-handbook/jail/_index — Spanish

You might be wondering what function `prison_ip()` does. `prison_ip()` is given three arguments, a pointer to the credential(represented by `cred`), any flags, and an IP address. It returns 1 if the IP address does NOT belong to the jail or 0 otherwise. As you can see from the code, if it is indeed an IP address not belonging to the jail, the protocol is not allowed to bind to that address.
Puedes estar preguntándonte qué es lo que hace la función `prison_ip()`. `prison_ip()` recibe tres argumentos, un puntero a la credencial (representado por `cred`), unos flags, y una dirección IP. Devuelve 1 si la dirección IP NO pertenece al jail o 0 en caso contrario. Como puedes ver en el código, si la dirección IP no pertenece al jail, no se permite al protocolo enlazarse a esa dirección.
4 months ago
User avatar fernape

New translation

Documentation / books/arch-handbook/jail/_index — Spanish

/usr/src/sys/netinet/in_pcb.c:
int
in_pcbbind_setup(struct inpcb *inp, struct sockaddr *nam, in_addr_t *laddrp,
u_short *lportp, struct ucred *cred)
{
...
struct sockaddr_in *sin;
...
if (nam) {
sin = (struct sockaddr_in *)nam;
...
if (sin->sin_addr.s_addr != INADDR_ANY)
if (prison_ip(cred, 0, &sin->sin_addr.s_addr))
return(EINVAL);
...
if (lport) {
...
if (prison && prison_ip(cred, 0, &sin->sin_addr.s_addr))
return (EADDRNOTAVAIL);
...
}
}
if (lport == 0) {
...
if (laddr.s_addr != INADDR_ANY)
if (prison_ip(cred, 0, &laddr.s_addr))
return (EINVAL);
...
}
...
if (prison_ip(cred, 0, &laddr.s_addr))
return (EINVAL);
...
}
/usr/src/sys/netinet/in_pcb.c:
int
in_pcbbind_setup(struct inpcb *inp, struct sockaddr *nam, in_addr_t *laddrp,
u_short *lportp, struct ucred *cred)
{
...
struct sockaddr_in *sin;
...
if (nam) {
sin = (struct sockaddr_in *)nam;
...
if (sin->sin_addr.s_addr != INADDR_ANY)
if (prison_ip(cred, 0, &sin->sin_addr.s_addr))
return(EINVAL);
...
if (lport) {
...
if (prison && prison_ip(cred, 0, &sin->sin_addr.s_addr))
return (EADDRNOTAVAIL);
...
}
}
if (lport == 0) {
...
if (laddr.s_addr != INADDR_ANY)
if (prison_ip(cred, 0, &laddr.s_addr))
return (EINVAL);
...
}
...
if (prison_ip(cred, 0, &laddr.s_addr))
return (EINVAL);
...
}
4 months ago
User avatar fernape

Translation changed

Documentation / books/arch-handbook/jail/_index — Spanish

There are certain protocols which are very common, such as TCP, UDP, IP and ICMP. IP and ICMP are on the same level: the network layer 2. There are certain precautions which are taken in order to prevent a jailed process from binding a protocol to a certain address only if the `nam` parameter is set. `nam` is a pointer to a `sockaddr` structure, which describes the address on which to bind the service. A more exact definition is that `sockaddr` "may be used as a template for referring to the identifying tag and length of each address". In the function `in_pcbbind_setup()`, `sin` is a pointer to a `sockaddr_in` structure, which contains the port, address, length and domain family of the socket which is to be bound. Basically, this disallows any processes from jail to be able to specify the address that does not belong to the jail in which the calling process exists.
Hay ciertos protocolos que son muy comunes, como TCP, UDP, IP e ICMP. IP e ICMP están en el mismo nivel: la capa de red 2. Hay ciertas precauciones que se toman para evitar que un proceso encerrado vincule un protocolo a una determinada dirección solo si el `nam` el parámetro está configurado. `nam` es un puntero a una estructura `sockaddr`, que describe la dirección a la que enlazar el servicio. Una definición más exacta es que `sockaddr` "se puede utilizar como plantilla para hacer referencia a la etiqueta de identificación y la longitud de cada dirección ". En la función `in_pcbbind_setup()`, `sin`eEs un puntero a una estructura `sockaddr_in`, que contiene el puerto, la dirección, la longitud y la familia de dominio del socket que se va a vincular. Básicamente, esto no permite que un proceso dentro de un `jail` especifique una dirección que no pertenece al `jail` en el que está encerrado el proceso llamante.
4 months ago
User avatar fernape

Translation changed

Documentation / books/arch-handbook/jail/_index — Spanish

There are certain protocols which are very common, such as TCP, UDP, IP and ICMP. IP and ICMP are on the same level: the network layer 2. There are certain precautions which are taken in order to prevent a jailed process from binding a protocol to a certain address only if the `nam` parameter is set. `nam` is a pointer to a `sockaddr` structure, which describes the address on which to bind the service. A more exact definition is that `sockaddr` "may be used as a template for referring to the identifying tag and length of each address". In the function `in_pcbbind_setup()`, `sin` is a pointer to a `sockaddr_in` structure, which contains the port, address, length and domain family of the socket which is to be bound. Basically, this disallows any processes from jail to be able to specify the address that does not belong to the jail in which the calling process exists.
Hay ciertos protocolos que son muy comunes, como TCP, UDP, IP e ICMP. IP e ICMP están en el mismo nivel: la capa de red 2. Hay ciertas precauciones que se toman para evitar que un proceso encerrado vincule un protocolo a una determinada dirección solo si el <literal>nam</literal>`nam` el parámetro está configurado. <literal>nam</literal>Es un puntero a un <literal>sockaddr</literal> estructura`nam` es un puntero a una estructura `sockaddr`, que describe la dirección a la que enlazar el servicio. Una definición más exacta es que <literal>sockaddr</literal>`sockaddr` "se puede utilizar como plantilla para hacer referencia a la etiqueta de identificación y la longitud de cada dirección ". En la función <literal>`in_pcbbind_setup()</literal>, <literal>sin</literal> Es un puntero a un <literal>sockaddr_in</literal> estructura`, `sin`eEs un puntero a una estructura `sockaddr_in`, que contiene el puerto, la dirección, la longitud y la familia de dominio del socket que se va a vincular. Básicamente, esto no permite ningúque un proceso de <application>jail</application>para poderntro de un `jail` especificar lque una dirección que no pertenece al <application>jail</application>en el que existe`jail` en el que está encerrado el proceso de llamadante.
4 months ago
Browse all translation changes