Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 12 Feb 2019 09:35:08 +0100
From:      Kristof Provost <kp@freebsd.org>
To:        "Rudy (bulk address)" <crapsh@monkeybrains.net>
Cc:        jail@freebsd.org
Subject:   Re: "ipfw log" messages from jail show in host syslog
Message-ID:  <20190212083508.GG8450@vega.codepro.be>
In-Reply-To: <2331cedc410f2123b2a0e142f81bf92e.squirrel@mail.monkeybrains.net>
References:  <2331cedc410f2123b2a0e142f81bf92e.squirrel@mail.monkeybrains.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2019-02-11 22:37:07 (-0800), Rudy (bulk address) <crapsh@monkeybrains.net> wrote:
> I've switched to VNET (love it) in jails.  Neat, you an have ipfw running
> in your jail!
> 
> I added some log lines to test it out and was a bit confused when
> /var/log/security wasn't showing the log lines.  Turns out, the kernel is
> grabbing them and logging in the host and not the chrooted environment.
> 
> Bug?  Feature?  :)
> 
"Known limitation", I think[*].

>From a quick look at the ipfw log code it appears to simply write the
logging information to the kernel log, which is not a per-jail things.

I don't expect this to be easy to change either.

Regards,
Kristof

[*] Not an ipfw maintainer. Warranty void where prohibited. Do not feed
after midnight.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20190212083508.GG8450>