Date: Sun, 25 Nov 2012 13:01:26 -0700 From: Jamie Gritton <jamie@FreeBSD.org> To: Beeblebrox <zaphod@berentweb.com> Cc: freebsd-jail@FreeBSD.org Subject: Re: Recent jail problems [was: ICMP RAW socket error] Message-ID: <50B27916.9010002@FreeBSD.org> In-Reply-To: <1353836793676-5763946.post@n5.nabble.com> References: <1352457514352-5759501.post@n5.nabble.com> <50A51022.5000801@FreeBSD.org> <1353228642821-5761961.post@n5.nabble.com> <1353836793676-5763946.post@n5.nabble.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 11/25/12 02:46, Beeblebrox wrote: > I'm probably overlooking certain things with this question, but there seems > to be a number of places to make jail-specific adjustments / settings. The > options available are: > > host /etc/rc.conf > host /etc/sysctl.conf > host /etc/devfs.rules > host /etc/jail.conf > > Q1: With regards to getting around this problem > (jail_xyz_parameters="allow.raw_sockets"), I tried placing this in > /etc/rc.conf but I also had in /etc/sysctl.conf: > security.jail.allow_raw_sockets=1 > security.jail.socket_unixiproute_only=1 > Maybe the 2 settings are in conflict? > > Q2: As far as I understand, jail related things in rc.conf, sysctl.conf and > devfs.rules should now be migrated to jail.conf - Is that correct? > Thanks. Jail.conf will replace the jail settings in rc.conf and sysctl.conf, but it doesn't yet. The rc system still uses the jail program in its old command-line mode, and not with the conf files. devfs.rules will keep its jail-related rules though. - Jamie
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?50B27916.9010002>