From owner-freebsd-questions@FreeBSD.ORG  Thu Feb  7 03:20:47 2013
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: questions@FreeBSD.org
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id A3F9AA96
 for <questions@FreeBSD.org>; Thu,  7 Feb 2013 03:20:47 +0000 (UTC)
 (envelope-from jamie@FreeBSD.org)
Received: from m2.gritton.org (gritton.org [199.192.164.235])
 by mx1.freebsd.org (Postfix) with ESMTP id 644D4E3F
 for <questions@FreeBSD.org>; Thu,  7 Feb 2013 03:20:46 +0000 (UTC)
Received: from glorfindel.gritton.org (c-174-52-130-157.hsd1.ut.comcast.net
 [174.52.130.157]) (authenticated bits=0)
 by m2.gritton.org (8.14.5/8.14.5) with ESMTP id r173GTJv080588;
 Wed, 6 Feb 2013 20:16:29 -0700 (MST)
 (envelope-from jamie@FreeBSD.org)
Message-ID: <51131C8C.10605@FreeBSD.org>
Date: Wed, 06 Feb 2013 20:16:28 -0700
From: Jamie Gritton <jamie@FreeBSD.org>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US;
 rv:1.9.2.24) Gecko/20120129 Thunderbird/3.1.16
MIME-Version: 1.0
To: FreeBSD questions <questions@FreeBSD.org>
Subject: Re: sysctl security.jail.* descriptions
References: <5112706B.8080707@a1poweruser.com>
 <CAFuo_fz8uB_4Vu671Y=dot=EnF+zhO_+sR21XX3GKdNooZy2AA@mail.gmail.com>
 <511273F6.7010801@a1poweruser.com>
 <CAFuo_fyrvidBaqsT82AmD3b0OzAgno6rxUQzFXPjAZa5eL-ddA@mail.gmail.com>
 <51128593.3080406@a1poweruser.com> <51128BDA.2080605@a1poweruser.com>
In-Reply-To: <51128BDA.2080605@a1poweruser.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: Fbsd8 <fbsd8@a1poweruser.com>, Waitman Gobble <gobble.wa@gmail.com>
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Feb 2013 03:20:47 -0000

On 02/06/13 09:59, Fbsd8 wrote:
 > Fbsd8 wrote:
 >> Waitman Gobble wrote:
 >>> On Feb 6, 2013 7:17 AM, "Fbsd8" <fbsd8@a1poweruser.com> wrote:
 >>>> Waitman Gobble wrote:
 >>>>> On Feb 6, 2013 7:02 AM, "Fbsd8" <fbsd8@a1poweruser.com> wrote:
 >>>>>> Where do I find the descriptions of what these jail MIBs do?
...
 >>>>>> security.jail.param.securelevel: 0
 >>>>>> security.jail.param.path: 1024
 >>>>>> security.jail.param.name: 256
 >>>>>> security.jail.param.parent: 0
 >>>>>> security.jail.param.jid: 0
...
 >>
 >> What about the other security.jail.param.* MIBs
 >> where are they documented at?

In the jail(8) main page, there's the following tidbit:

| Jails have a set a core parameters, and kernel modules can add their
| own jail parameters. The current set of available parameters can be
| retrieved via ``sysctl -d security.jail.param''. Any parameters not
| set will be given default values, often based on the current
| environment.

The sysctls do not themselves have values. Their useful parts are the
associated types and descriptions (as well as their very existence). The
descriptions are good for the above-mentioned "sysctl -d", and the types
are used by jail(8) to know how to set a particular parameter.

> Rereading the "man jail" for 9.1 talks about securelevel as a jail
> parammeter. So correct me if I an wrong. All the
> security.jail.param.* MIBs are set in rc.conf or /etc/jail.conf file
> on a per jail bases by changing the word "parm" to the jailname?

There's not always a direct connection between the jail parameters and
the current rc.conf values. The jail parameters are what you'd use in a
jail.conf(5) file, or in the "jail_jailname_parameters" rc variable.

- Jamie