Date: Sat, 4 Aug 2001 18:23:31 +0200 From: Adrian Chadd <adrian@FreeBSD.org> To: Robert Watson <rwatson@FreeBSD.org> Cc: cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/kern kern_jail.c Message-ID: <20010804182331.A67466@ywing.creative.net.au> In-Reply-To: <200108031821.f73IL8Z59947@freefall.freebsd.org>; from rwatson@FreeBSD.org on Fri, Aug 03, 2001 at 11:21:07AM -0700 References: <200108031821.f73IL8Z59947@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Aug 03, 2001, Robert Watson wrote: > rwatson 2001/08/03 11:21:06 PDT > > Modified files: > sys/kern kern_jail.c > Log: > Anton kindly pointed out (and fixed) a bug in the Jail handling of the > bind() call on IPv4 sockets: > > Currently, if one tries to bind a socket using INADDR_LOOPBACK inside a > jail, it will fail because prison_ip() does not take this possibility > into account. On the other hand, when one tries to connect(), for > example, to localhost, prison_remote_ip() will silently convert > INADDR_LOOPBACK to the jail's IP address. Therefore, it is desirable to > make bind() to do this implicit conversion as well. > > Apart from this, the patch also replaces 0x7f000001 in > prison_remote_ip() to a more correct INADDR_LOOPBACK. > > This is a 4.4-RELEASE "during the freeze, thanks" MFC candidate. Cool! I was hoping this would go in - it fixes a problem with running squid in a jail (the helper apps want to use 127.0.0.1, but binding to them fails..) Adrian To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010804182331.A67466>