Re: Thoughts on jail.config

2010-06-23 Thread Rodrigo Mosconi
Just a comment: IF a jail is a VNET jail, that jail doesnt need the ip4/ip6 addresses 2010/6/23 Jamie Gritton : > The rc system is becoming increasingly unable to handle the newer jail > features.  We've held off patching /etc/rc.d/jail for new parameters, > with the promise of something better.

Thoughts on jail.config

2010-06-23 Thread Jamie Gritton
The rc system is becoming increasingly unable to handle the newer jail features. We've held off patching /etc/rc.d/jail for new parameters, with the promise of something better. Here's my outline of what I hope will be in fact better than what we have now. I'm working on extending jail(8) to us

Re: docs/96807: document security.jail.list sysctl in jail(8)

2010-06-23 Thread Jamie Gritton
Actually, I suspect the change was made intentionally. security.jail.list is obsoleted by jail_get(2), which can show jail parameters that the struct xprison doesn't include. So using either jail_get(2) or jailparam_get(3) programatically, or jls from the command line is a better solution than sec

docs/96807: document security.jail.list sysctl in jail(8)

2010-06-23 Thread Anton Yuzhaninov
After this PR: http://www.freebsd.org/cgi/query-pr.cgi?pr=96807 security.jail.list sysctl description was added to jail(8). but in this commit: http://svn.freebsd.org/changeset/base/192896 this text was deleted (probably accidentally). Please return security.jail.list description to jail(8) man p