Re: kern/68189 and kern/169751: what jails are allowed to see in a routing socket

2013-01-03 Thread Bjoern A. Zeeb
On Wed, 2 Jan 2013, Jamie Gritton wrote: I've been looking at PR kern/169751, which was noting that routing sockets don't work inside a jail. It made the point that setting security.jail.socket_unixiproute_only or security.jail.allow_raw_sockets didn't help things. It would seem kind of a

Re: kern/68189 and kern/169751: what jails are allowed to see in a routing socket

2013-01-03 Thread Jamie Gritton
On 01/03/13 02:36, Bjoern A. Zeeb wrote: On Wed, 2 Jan 2013, Jamie Gritton wrote: I've been looking at PR kern/169751, which was noting that routing sockets don't work inside a jail. It made the point that setting security.jail.socket_unixiproute_only or security.jail.allow_raw_sockets didn't

Re: kern/68189 and kern/169751: what jails are allowed to see in a routing socket

2013-01-03 Thread Isaac (.ike) Levy
Hi Jamie, All, On Jan 3, 2013, at 4:36 AM, Bjoern A. Zeeb wrote: On Wed, 2 Jan 2013, Jamie Gritton wrote: I've been looking at PR kern/169751, which was noting that routing sockets don't work inside a jail. It made the point that setting security.jail.socket_unixiproute_only or

Re: kern/68189 and kern/169751: what jails are allowed to see in a routing socket

2013-01-03 Thread David Thiel
On Thu, Jan 03, 2013 at 10:48:24AM -0700, Jamie Gritton wrote: On 01/03/13 02:36, Bjoern A. Zeeb wrote: Meanwhile your suggestion might be ok given simple enough, but I wonder if a different flag would be helpful still. I would not be able to trust (the little that is possible anyway)

kern/68189 and kern/169751: what jails are allowed to see in a routing socket

2013-01-02 Thread Jamie Gritton
I've been looking at PR kern/169751, which was noting that routing sockets don't work inside a jail. It made the point that setting security.jail.socket_unixiproute_only or security.jail.allow_raw_sockets didn't help things. It would seem kind of a given from the unixiproute name that a