https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273557
--- Comment #10 from Bjoern A. Zeeb <b...@freebsd.org> --- (In reply to crest from comment #9) I wont' be at Euro. You can find some bhyve or networking or jails people and see. I see talks on all thee subjects. The real question however (and I hinted at that when I asked) is why a privileged operation on a networking device is allowed in first place inside an IP-based (or a non-IP) jail. I assume for tun/tap the idea was that you need the device node and that needs manual intervention already? Another thing I hinted before was netlink; one should check how ifconfig currently does and IFF_UP maybe in a new netlink world. That may possibly avoid the IP sockets proper. I believe you'll find the netlink expert at Euro as well. -- You are receiving this mail because: You are the assignee for the bug.
