From owner-freebsd-questions@FreeBSD.ORG  Tue May 19 17:02:18 2015
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 5E636D64
 for <freebsd-questions@freebsd.org>; Tue, 19 May 2015 17:02:18 +0000 (UTC)
Received: from SNT004-OMC4S45.hotmail.com (snt004-omc4s45.hotmail.com
 [65.54.51.96])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits))
 (Client CN "*.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 2FF551886
 for <freebsd-questions@freebsd.org>; Tue, 19 May 2015 17:02:17 +0000 (UTC)
Received: from SNT146-W30 ([65.55.90.201]) by SNT004-OMC4S45.hotmail.com over
 TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751); 
 Tue, 19 May 2015 10:01:11 -0700
X-TMN: [f9zd6N9ii2+1nipgkl2R0ompC9YCvMVj]
X-Originating-Email: [ricky1252@hotmail.com]
Message-ID: <SNT146-W301EA272BA27663DF624B2A1C30@phx.gbl>
From: Ricky G <ricky1252@hotmail.com>
To: Mike Tancsa <mike@sentex.net>
CC: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject: RE: devfs.rules in a jail
Date: Tue, 19 May 2015 13:01:10 -0400
Importance: Normal
In-Reply-To: <555B43AC.3010807@sentex.net>
References: <555B43AC.3010807@sentex.net>
MIME-Version: 1.0
X-OriginalArrivalTime: 19 May 2015 17:01:11.0137 (UTC)
 FILETIME=[682C8D10:01D09255]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Content-Filtered-By: Mailman/MimeDel 2.1.20
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 19 May 2015 17:02:18 -0000



> Date: Tue=2C 19 May 2015 10:07:40 -0400
> From: mike@sentex.net
> To: freebsd-questions@freebsd.org
> Subject: devfs.rules in a jail
>=20
> Hi=2C
> 	I am trying to expose a single ugen device inside a jail.  In this=20
> case=2C a pkcs11 token. However=2C I cant seem to get the config right.
>=20
> I started with a simple ezjail default config
>=20
> export jail_mdtp_sentex_ca_devfs_ruleset=3D"devfsrules_jail"
>=20
> and in the rules file=2C I have
>=20
> # cat /etc/devfs.rules
> [devfsrules_jail=3D5]
> add path 'ugen[0-9]\*'  mode 666
> add path 'usb/[0-9]\*'  mode 666


export jail_mdtp_sentex_ca_devfs_ruleset=3D"5"
I don't know why its possible to name the rules but only the rule number ma=
tters when setting the jails ruleset. 		 	   		  =