Bind to port <1024 in jail

Bjoern A. Zeeb bzeeb-lists at lists.zabbadoz.net
Mon Aug 20 16:32:34 UTC 2018


On 20 Aug 2018, at 16:22, Stefan Bethke wrote:

>>> Is there a way to allow regular processes to bind to low ports?
>>
>> you have to set it on the base system;  alternatively with vnet you 
>> might be able to change it per-jail.
>
> Do you feel it’s OK to enable VIMAGE in -stable? When I tried last 
> in 2016, I had stability issues, I think related to pf.

“If you know what you are doing it won’t panic” ;-)   I think with 
12 I’d be a lot more confident about stability.  Most fixes could not 
and were not MFCed.

/bz


More information about the freebsd-stable mailing list