Re: security.bsd.see_other_uids/gids and jails
Date: Tue, 27 Aug 2024 16:07:34 UTC
doug@safeport.com writes: > If you did this command as root, your system is seriously messed up. I > did this on a 12.2 system runing as 12.2 jail. This is neither relevant nor helpful. - 12.2 is four years old and no longer supported. - `security.bsd.see_other_uids` is not settable from within a jail and never was (it does not, and never did, have the `CTLFLAG_PRISON` flag), so if you successfully did this, it is _your_ system which is “seriously messed up”. - None of this answers the original question, which was whether it can be changed on a per-jail basis, and the answer to that is no, it applies equally to all users, jailed or unjailed. Only nodes in the `security.jail.param` subtree can be changed per-jail. DES -- Dag-Erling Smørgrav - des@FreeBSD.org