Re: jail(8) allow.socket_af, unknown oid

2010-05-26 Thread Jamie Gritton
I think the current situation should be sufficient, where the only mention of the parameter sysctls are the note that you can see them via "sysctl -d security.jail.param". The move toward jail parameters is also a move away from using sysctl variables for the same purpose. In this new jail order,

Re: jail(8) allow.socket_af, unknown oid

2010-05-26 Thread Glen Barber
Hi Jamie, On 5/26/10 12:57 PM, Jamie Gritton wrote: On 05/25/10 11:54, Glen Barber wrote: The jail(8) man page has an entry under 'allow.*', allow.socket_af, which states to allow access to protocol stacks that have not had jail functionality added to them. [snip] Is this sysctl missing, or

Re: jail(8) allow.socket_af, unknown oid

2010-05-26 Thread Jamie Gritton
The sysctls that describe available jail parameters don't always have a type that sysctl(8) understands. In particular, the boolean parameters are given a sysctl type of "B", and sysctl(8) will ignore them. These aren't useful sysctls in any normal way - they never have a meaningful value. The ex