Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Aug 2018 16:32:27 +0000
From:      "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
To:        "Stefan Bethke" <stb@lassitu.de>
Cc:        "FreeBSD Stable" <freebsd-stable@freebsd.org>
Subject:   Re: Bind to port <1024 in jail
Message-ID:  <30A6405A-6DC1-461E-B45D-CFFF659F80F8@lists.zabbadoz.net>
In-Reply-To: <2FA29D2E-7C15-4C9D-A59B-98E9EA916891@lassitu.de>
References:  <75536186-7D58-498C-BFC6-9284EB7CB444@lassitu.de> <D9F9531F-6EB5-44F9-B8F3-523C0C2E0E44@lists.zabbadoz.net> <2FA29D2E-7C15-4C9D-A59B-98E9EA916891@lassitu.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On 20 Aug 2018, at 16:22, Stefan Bethke wrote:

>>> Is there a way to allow regular processes to bind to low ports?
>>
>> you have to set it on the base system;  alternatively with vnet you 
>> might be able to change it per-jail.
>
> Do you feel it’s OK to enable VIMAGE in -stable? When I tried last 
> in 2016, I had stability issues, I think related to pf.

“If you know what you are doing it won’t panic” ;-)   I think with 
12 I’d be a lot more confident about stability.  Most fixes could not 
and were not MFCed.

/bz



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?30A6405A-6DC1-461E-B45D-CFFF659F80F8>