From owner-freebsd-doc@freebsd.org Mon Apr 25 18:57:22 2016 Return-Path: Delivered-To: freebsd-doc@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EC692B1C03D for ; Mon, 25 Apr 2016 18:57:22 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (wonkity.com [67.158.26.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "wonkity.com", Issuer "wonkity.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id BCF3B1395 for ; Mon, 25 Apr 2016 18:57:22 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (localhost [127.0.0.1]) by wonkity.com (8.15.2/8.15.2) with ESMTPS id u3PImdWp097382 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 25 Apr 2016 12:48:39 -0600 (MDT) (envelope-from wblock@wonkity.com) Received: from localhost (wblock@localhost) by wonkity.com (8.15.2/8.15.2/Submit) with ESMTP id u3PImd0G097379; Mon, 25 Apr 2016 12:48:39 -0600 (MDT) (envelope-from wblock@wonkity.com) Date: Mon, 25 Apr 2016 12:48:38 -0600 (MDT) From: Warren Block To: Christoph Brinkhaus cc: freebsd-doc@freebsd.org, Philipp Erbelding Subject: Re: ezjail allow.raw_socket handbook wrong confing In-Reply-To: <20160425165023.GA1540@esprimo.local> Message-ID: References: <20160425165023.GA1540@esprimo.local> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (wonkity.com [127.0.0.1]); Mon, 25 Apr 2016 12:48:39 -0600 (MDT) X-BeenThere: freebsd-doc@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Documentation project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Apr 2016 18:57:23 -0000 On Mon, 25 Apr 2016, Christoph Brinkhaus wrote: > On Mon, Apr 25, 2016 at 05:37:28PM +0200, Philipp Erbelding wrote: > > Hello Philipp! > >> Hi, >> I think there is a misunderstanding about the issue here. >> >>> "jailname" in both the paragraph and the configuration line are shown in >>> italic because they are strings that the user is supposed to replace >>> with the actual jail name. >>> >>> Would it help to break up that paragraph into shorter sentences? >>> >>> When raw network sockets are actually needed in a jail, they can be >>> enabled. Edit the ezjail configuration file for the individual >>> jail, /usr/local/etc/ezjail/jailname. Modify the parameters entry: >> >> Is the problem with the mentioned section not with the "=1" which is no longer current? >> I found this reference in the forums about it only working without the "=1": https://forums.freebsd.org/threads/54365/ >> >> Kind regards >> Philipp > > export jail_testjail1_parameters="allow.raw_sockets=1" is not mentioned > in https://forums.freebsd.org/threads/54365/ > > But I can confirm that the syntax as > export jail_testjail1_parameters="allow.raw_sockets=1" > works for me. And for me. This is from a live, working jail named "icinga" here: export jail_icinga_parameters="allow.raw_sockets=1" It's not clear what the misunderstanding or problem was, or what the suggested change is to fix it.