Recent jail problems [was: ICMP RAW socket error]

[Jamie Gritton]

On 11/25/12 02:46, Beeblebrox wrote:
> I'm probably overlooking certain things with this question, but there seems
> to be a number of places to make jail-specific adjustments / settings. The
> options available are:
>
> host /etc/rc.conf
> host /etc/sysctl.conf
> host /etc/devfs.rules
> host /etc/jail.conf
>
> Q1: With regards to getting around this problem
> (jail_xyz_parameters="allow.raw_sockets"), I tried placing this in
> /etc/rc.conf but I also had in /etc/sysctl.conf:
> security.jail.allow_raw_sockets=1
> security.jail.socket_unixiproute_only=1
> Maybe the 2 settings are in conflict?
>
> Q2: As far as I understand, jail related things in rc.conf, sysctl.conf and
> devfs.rules should now be migrated to jail.conf - Is that correct?
> Thanks.

Jail.conf will replace the jail settings in rc.conf and sysctl.conf, but
it doesn't yet. The rc system still uses the jail program in its old
command-line mode, and not with the conf files. devfs.rules will keep
its jail-related rules though.

- Jamie