738 	const struct prison *tppr, *tpr;  in prison_ip_conflict_check()  local
748 	FOREACH_PRISON_DESCENDANT(tppr, tpr, descend) {  in prison_ip_conflict_check()
749 		if (tpr == pr ||  in prison_ip_conflict_check()
751 		    (tpr != tppr && (tpr->pr_flags & PR_VNET)) ||  in prison_ip_conflict_check()
753 		    !prison_isalive(tpr)) {  in prison_ip_conflict_check()
757 		if (!(tpr->pr_flags & pr_families[af].ip_flag))  in prison_ip_conflict_check()
760 		if (tpr->pr_addrs[af] == NULL ||  in prison_ip_conflict_check()
761 		    (pip->ips == 1 && tpr->pr_addrs[af]->ips == 1))  in prison_ip_conflict_check()
764 			if (prison_ip_check(tpr, af, PR_IP(pip, af, i)) == 0)  in prison_ip_conflict_check()
990 	struct prison *pr, *deadpr, *dinspr, *inspr, *mypr, *ppr, *tpr;  in kern_jail_set()  local
1530 			FOREACH_PRISON_CHILD(ppr, tpr) {  in kern_jail_set()
1531 				if (tpr == pr || !prison_isalive(tpr) ||  in kern_jail_set()
1532 				    strcmp(tpr->pr_name + pnamelen, namelc))  in kern_jail_set()
1545 				pr = tpr;  in kern_jail_set()
1576 		for (tpr = mypr; tpr != NULL; tpr = tpr->pr_parent)  in kern_jail_set()
1577 			if (tpr->pr_childcount >= tpr->pr_childmax) {  in kern_jail_set()
1637 		for (tpr = ppr; tpr != NULL; tpr = tpr->pr_parent)  in kern_jail_set()
1638 			tpr->pr_childcount++;  in kern_jail_set()
1841 		FOREACH_PRISON_DESCENDANT(pr, tpr, descend) {  in kern_jail_set()
1842 			if (strlen(tpr->pr_name) + (namelen - onamelen) >=  in kern_jail_set()
1884 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {  in kern_jail_set()
1886 			if (tpr->pr_flags & PR_VNET) {  in kern_jail_set()
1891 			if (!prison_ip_restrict(tpr, PR_INET, NULL)) {  in kern_jail_set()
1904 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {  in kern_jail_set()
1906 			if (tpr->pr_flags & PR_VNET) {  in kern_jail_set()
1911 			if (!prison_ip_restrict(tpr, PR_INET6, NULL)) {  in kern_jail_set()
1921 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend)  in kern_jail_set()
1922 			if (tpr->pr_securelevel < slevel)  in kern_jail_set()
1923 				tpr->pr_securelevel = slevel;  in kern_jail_set()
1928 		FOREACH_PRISON_DESCENDANT_LOCKED_LEVEL(pr, tpr, descend, level)  in kern_jail_set()
1929 			if (tpr->pr_childmax > childmax - level)  in kern_jail_set()
1930 				tpr->pr_childmax = childmax > level  in kern_jail_set()
1936 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend)  in kern_jail_set()
1937 			if (tpr->pr_enforce_statfs < enforce)  in kern_jail_set()
1938 				tpr->pr_enforce_statfs = enforce;  in kern_jail_set()
1943 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend)  in kern_jail_set()
1944 			tpr->pr_devfs_rsnum = rsnum;  in kern_jail_set()
1953 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {  in kern_jail_set()
1954 			bcopy(tpr->pr_name + onamelen, tpr->pr_name + namelen,  in kern_jail_set()
1955 			    strlen(tpr->pr_name + onamelen) + 1);  in kern_jail_set()
1956 			bcopy(pr->pr_name, tpr->pr_name, namelen);  in kern_jail_set()
1992 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {  in kern_jail_set()
1993 			if (tpr->pr_flags & PR_HOST)  in kern_jail_set()
1997 					strlcpy(tpr->pr_hostname,  in kern_jail_set()
1999 					    sizeof(tpr->pr_hostname));  in kern_jail_set()
2001 					strlcpy(tpr->pr_domainname,   in kern_jail_set()
2003 					    sizeof(tpr->pr_domainname));  in kern_jail_set()
2005 					strlcpy(tpr->pr_hostuuid,  in kern_jail_set()
2007 					    sizeof(tpr->pr_hostuuid));  in kern_jail_set()
2009 					tpr->pr_hostid = hid;  in kern_jail_set()
2059 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {  in kern_jail_set()
2061 			if (tpr->pr_flags & PR_VNET) {  in kern_jail_set()
2066 			if (!prison_ip_restrict(tpr, PR_INET, &ip4))  in kern_jail_set()
2079 		FOREACH_PRISON_DESCENDANT_LOCKED(pr, tpr, descend) {  in kern_jail_set()
2081 			if (tpr->pr_flags & PR_VNET) {  in kern_jail_set()
2086 			if (!prison_ip_restrict(tpr, PR_INET6, &ip6))  in kern_jail_set()
3128 	struct prison *killpr, *rpr, *ppr, *tpr;  in prison_deref()  local
3249 	TAILQ_FOREACH_SAFE(rpr, &freeprison, pr_list, tpr) {  in prison_deref()