ch(4) FreeBSD 11.1 jails

[Dan Langille]

I'm trying to access a tape library from within a FreeBSD 11 jail.

I've added this to the host system:

[devfsrules_jail_unhide_tapes=5]
add path sa0    unhide
add path pass0  unhide
add path pass7  unhide mode 0600
add path ch0    unhide
add path nsa0   unhide

add path sa1    unhide
add path pass8  unhide
add path pass9  unhide mode 0600
add path ch1    unhide
add path nsa1   unhide


[devfsrules_jail_bacula=6]
add include $devfsrules_hide_all
add include $devfsrules_unhide_basic
add include $devfsrules_unhide_login
add path zfs unhide
add include $devfsrules_jail_unhide_tapes



The jail can see the devices, and query the tape drive, but not the changer:

$ sudo mtx -f /dev/pass7 status
cannot open SCSI device '/dev/pass7' - Operation not permitted

The same command in the jail host succeeds.

Is there something more special I'm missing about FreeBSD 11.1? This worked for me under 10.3.

Thank you.


-- 
Dan Langille - BSDCan / PGCon
dan at langille.org