Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 May 2010 13:54:12 -0400
From:      Glen Barber <glen.j.barber@gmail.com>
To:        jail@freebsd.org
Subject:   jail(8) allow.socket_af, unknown oid
Message-ID:  <20100525175412.GA75052@orion.glenbarber.us>

next in thread | raw e-mail | index | archive | help
Hi,

The jail(8) man page has an entry under 'allow.*', allow.socket_af, which
states to allow access to protocol stacks that have not had jail functionality
added to them.

However, though socket_af exists in sys/kern/kern_jail.c, the sysctl itself
does not exist on my system:

    orion# sysctl -a | grep socket
    kern.ipc.maxsockets: 25600
    kern.ipc.numopensockets: 35
    security.jail.allow_raw_sockets: 0
    security.jail.socket_unixiproute_only: 1

Is this sysctl missing, or is it not a tunable?

Regards,

-- 
Glen Barber



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100525175412.GA75052>