[Bug 292369] security/suricata Enable service jail

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 11 Jan 2026 23:02:35 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292369

            Bug ID: 292369
           Summary: security/suricata Enable service jail
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: bofh@freebsd.org
          Reporter: p+freebsd@krvtz.net
             Flags: maintainer-feedback?(bofh@freebsd.org)
          Assignee: bofh@freebsd.org

Adding the following to /usr/local/etc/rc.d/suricata will make Suricata
compatible with 15-RELEASE service jails:

: ${suricata_svcj_options:="net_all"}

Full working config from my /etc/rc.d:

suricata_enable="YES"
suricata_netmap="YES"
suricata_svcj="YES"
suricata_svcj_options="net_all"

The "net_all" flag is important because otherwise Suricata won't be able to
open netmap interface.

-- 
You are receiving this mail because:
You are the assignee for the bug.