From owner-svn-src-all@FreeBSD.ORG Wed Jul 29 16:51:02 2009 Return-Path: Delivered-To: svn-src-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 264CB106564A; Wed, 29 Jul 2009 16:51:02 +0000 (UTC) (envelope-from sam@errno.com) Received: from ebb.errno.com (ebb.errno.com [69.12.149.25]) by mx1.freebsd.org (Postfix) with ESMTP id F0B8E8FC14; Wed, 29 Jul 2009 16:51:01 +0000 (UTC) (envelope-from sam@errno.com) Received: from ice.local ([10.0.0.115]) (authenticated bits=0) by ebb.errno.com (8.13.6/8.12.6) with ESMTP id n6TGp1DY073634 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 29 Jul 2009 09:51:01 -0700 (PDT) (envelope-from sam@errno.com) Message-ID: <4A707DF5.5050108@errno.com> Date: Wed, 29 Jul 2009 09:51:01 -0700 From: Sam Leffler User-Agent: Thunderbird 2.0.0.22 (Macintosh/20090605) MIME-Version: 1.0 To: Jamie Gritton References: <200907291641.n6TGf2mb076622@svn.freebsd.org> In-Reply-To: <200907291641.n6TGf2mb076622@svn.freebsd.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-DCC-URT-Metrics: ebb.errno.com; whitelist Cc: svn-src-head@FreeBSD.org, svn-src-all@FreeBSD.org, src-committers@FreeBSD.org Subject: Re: svn commit: r195944 - head/sys/kern X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jul 2009 16:51:02 -0000 Jamie Gritton wrote: > Author: jamie > Date: Wed Jul 29 16:41:02 2009 > New Revision: 195944 > URL: http://svn.freebsd.org/changeset/base/195944 > > Log: > Change the default value of the "ip4" and "ip6" jail parameters to > "disable", which only allows access to the parent/physical system's > IP addresses when specifically directed. Change the default value of > "host" to "new", and don't copy the parent host values, to insulate > jails from the parent hostname et al. This does not say why you're making these changes; please explain. Sam