cvs commit: src/usr.sbin/jail jail.8

[Christian S.J. Peron]

csjp        2004/05/31 17:25:44 PDT

  FreeBSD src repository

  Modified files:
    usr.sbin/jail        jail.8 
  Log:
  Add a warning note to security.jail.allow_raw_sockets
  about the risks of enabling raw sockets in prisons.
  
  Because raw sockets can be used to configure and interact
  with various network subsystems, extra caution should be
  used where privileged access to jails is given out to
  untrusted parties. As such, by default this option is disabled.
  
  A few others and I are currently auditing the kernel
  source code to ensure that the use of raw sockets by
  privledged prison users is safe.
  
  Approved by:    bmilekic (mentor)
  
  Revision  Changes    Path
  1.54      +4 -1      src/usr.sbin/jail/jail.8