Hi,
The jail(8) man page has an entry under 'allow.*', allow.socket_af, which
states to allow access to protocol stacks that have not had jail functionality
added to them.
However, though socket_af exists in sys/kern/kern_jail.c, the sysctl itself
does not exist on my system:
orion# sysctl -a | grep socket
kern.ipc.maxsockets: 25600
kern.ipc.numopensockets: 35
security.jail.allow_raw_sockets: 0
security.jail.socket_unixiproute_only: 1
Is this sysctl missing, or is it not a tunable?
Regards,
--
Glen Barber
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "[email protected]"
