[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ezjail] per jail security parameters



On Mon, Jul 29, 2013 at 09:17:50AM +0200, kaltheat wrote:
> 
> Hi,
> 
> I'm searching for something that is AFAIK not documented anywhere.
> 
> I want to use per jail security parameters (introduced to FreeBSD
> 9.1 ?). For example I want to allow raw sockets to a single jail
> and not to all jails of a jail-host (which was the old way I think).
> From what I've seen so far it should be possible if one uses
> base-systems jail-rc-script along with jail.conf. But how can I use
> it with ezjail?
> 

With ezjail 3.3, I use this in the ezjail config:

export jail_${jail}_parameters="allow.raw_sockets=1"

Glen

Attachment: pgp_k61Odko4V.pgp
Description: PGP signature