jail(8) allow.socket_af, unknown oid

Glen Barber glen.j.barber at gmail.com
Tue May 25 18:22:47 UTC 2010


Hi,

The jail(8) man page has an entry under 'allow.*', allow.socket_af, which
states to allow access to protocol stacks that have not had jail functionality
added to them.

However, though socket_af exists in sys/kern/kern_jail.c, the sysctl itself
does not exist on my system:

    orion# sysctl -a | grep socket
    kern.ipc.maxsockets: 25600
    kern.ipc.numopensockets: 35
    security.jail.allow_raw_sockets: 0
    security.jail.socket_unixiproute_only: 1

Is this sysctl missing, or is it not a tunable?

Regards,

-- 
Glen Barber


More information about the freebsd-jail mailing list