svn commit: r251576 - stable/8/release/doc/en_US.ISO8859-1/errata

Hiroki Sato hrs at FreeBSD.org
Sun Jun 9 15:08:51 UTC 2013


Author: hrs
Date: Sun Jun  9 15:08:51 2013
New Revision: 251576
URL: http://svnweb.freebsd.org/changeset/base/251576

Log:
  - Remove bge(4) item [*].
  - Add jail_parameters incompatibility.
  
  Discussed with:	yongari [*]

Modified:
  stable/8/release/doc/en_US.ISO8859-1/errata/article.xml

Modified: stable/8/release/doc/en_US.ISO8859-1/errata/article.xml
==============================================================================
--- stable/8/release/doc/en_US.ISO8859-1/errata/article.xml	Sun Jun  9 14:31:59 2013	(r251575)
+++ stable/8/release/doc/en_US.ISO8859-1/errata/article.xml	Sun Jun  9 15:08:51 2013	(r251576)
@@ -206,6 +206,54 @@
   <sect1 id="open-issues">
     <title>Open Issues</title>
 
+    <para>[20130609] There is incompatibility in &man.jail.8;
+      configuration because the &man.jail.8; utility and
+      <filename>rc.d/jail</filename> script has been changed.  More
+      specifically, the following &man.sysctl.8; variables cannot be
+      used to set the default parameters for jails:</para>
+
+    <programlisting>security.jail.mount_zfs_allowed
+security.jail.mount_procfs_allowed
+security.jail.mount_nullfs_allowed
+security.jail.mount_devfs_allowed
+security.jail.mount_allowed
+security.jail.chflags_allowed
+security.jail.allow_raw_sockets
+security.jail.sysvipc_allowed
+security.jail.socket_unixiproute_only
+security.jail.set_hostname_allowed</programlisting>
+
+    <para>These could be set by manually using &man.sysctl.8; utility,
+      the &man.sysctl.conf.5; file, or for some of them the following
+      variables in &man.rc.conf.5;:</para>
+
+    <programlisting>jail_set_hostname_allow="yes"
+jail_socket_unixiproute_only="yes"
+jail_sysvipc_allow="yes"</programlisting>
+
+    <para>These parameters must now be specified in
+      <varname>jail_parameters</varname> (or
+      <varname>jail_<replaceable>jailname</replaceable>_parameters</varname>
+      for per-jail configuration) in &man.rc.conf.5;.  For
+      example:</para>
+
+    <programlisting>jail_parameters="allow.sysvipc allow.raw_sockets"</programlisting>
+
+    <para>The valid keywords are the following.  For more detail, see
+      &man.jail.8; manual page.</para>
+
+    <programlisting>allow.set_hostname
+allow.sysvipc
+allow.raw_sockets
+allow.chflags
+allow.mount
+allow.mount.devfs
+allow.mount.nullfs
+allow.mount.procfs
+allow.mount.zfs
+allow.quotas
+allow.socket_af</programlisting>
+
     <para>[20130608] &os; &release; no longer supports &os; CVS
       repository.  Some documents mistakenly refer to
       <literal>RELENG_8_4_0_RELEASE</literal> as CVS tag for the release and
@@ -220,22 +268,8 @@
       Please note that &os; source tree for &release; and its security
       branch cannot be updated by using official CVSup servers.</para>
 
-    <para>[20130607] The &man.bge.4; network interface driver has an
-      issue when TSO (TCP Segmentation Offload) is enabled.  It causes
-      intermittent reset and re-initialization.</para>
-
-    <para>A workaround is disabling the TSO feature.  One can disable
-      it by adding the following line into the &man.rc.conf.5;
-      file:</para>
-
-    <programlisting>ifconfig_<replaceable>bge0</replaceable>="-tso"</programlisting>
-
-    <para>or by using the &man.ifconfig.8; utility manually:</para>
-
-    <screen>&prompt.root; <userinput>ifconfig <replaceable>bge0</replaceable> -tso</userinput></screen>
-
-    <para>A patch to fix this issue will be released as an Errata
-      Notice.</para>
+    <para>[20130607] (removed about a &man.bge.4; network interface
+	driver issue because it was incorrect)</para>
 
     <para>[20130606] The &man.fxp.4; network interface driver may not
       work well with the &man.dhclient.8; utility.  More specifically,


More information about the svn-src-stable-8 mailing list