From owner-freebsd-jail@freebsd.org  Thu Jul  7 07:53:39 2016
Return-Path: <owner-freebsd-jail@freebsd.org>
Delivered-To: freebsd-jail@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 45D4DB21F54
 for <freebsd-jail@mailman.ysv.freebsd.org>;
 Thu,  7 Jul 2016 07:53:39 +0000 (UTC)
 (envelope-from 000.fbsd@quip.cz)
Received: from elsa.codelab.cz (elsa.codelab.cz [94.124.105.4])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 09D5D1845
 for <freebsd-jail@freebsd.org>; Thu,  7 Jul 2016 07:53:38 +0000 (UTC)
 (envelope-from 000.fbsd@quip.cz)
Received: from elsa.codelab.cz (localhost [127.0.0.1])
 by elsa.codelab.cz (Postfix) with ESMTP id B1A9C284E7;
 Thu,  7 Jul 2016 09:53:29 +0200 (CEST)
Received: from illbsd.quip.test (ip-86-49-16-209.net.upcbroadband.cz
 [86.49.16.209])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by elsa.codelab.cz (Postfix) with ESMTPSA id 00B5328454;
 Thu,  7 Jul 2016 09:53:28 +0200 (CEST)
Message-ID: <577E0A78.1040600@quip.cz>
Date: Thu, 07 Jul 2016 09:53:28 +0200
From: Miroslav Lachman <000.fbsd@quip.cz>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
 rv:35.0) Gecko/20100101 Firefox/35.0 SeaMonkey/2.32
MIME-Version: 1.0
To: Ultima <ultima1252@gmail.com>, Grzegorz Junka <list1@gjunka.com>
CC: freebsd-jail@freebsd.org
Subject: Re: Effective rule sets in a jail?
References: <2aeb6798-11ee-27c0-610a-d745aa322f97@gjunka.com>
 <CANJ8om5R-BT=heC+giMTXFH8YQXhuPQZjQ_S-P1bQ1XBGS16uQ@mail.gmail.com>
In-Reply-To: <CANJ8om5R-BT=heC+giMTXFH8YQXhuPQZjQ_S-P1bQ1XBGS16uQ@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-jail@freebsd.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Discussion about FreeBSD jail\(8\)" <freebsd-jail.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-jail>,
 <mailto:freebsd-jail-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-jail/>
List-Post: <mailto:freebsd-jail@freebsd.org>
List-Help: <mailto:freebsd-jail-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-jail>,
 <mailto:freebsd-jail-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Jul 2016 07:53:39 -0000

Ultima wrote on 07/07/2016 06:04:
> Not so. The top variable, devfs_ruleset = 4 is being set as the default for
> all jails. The devfs_ruleset = 5 inside the brackets is changing the
> default value.
>
> How to check what ruleset is mounted? That is a great question. I'm not
> sure of an easy way to check other than verifying the /dev directory inside
> the jail.

There is no way to set more than one devfs rule to jail AFAIK.
You can see the rule number in output of jls -s or jls -n.

Miroslav Lachman