d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

- Add a note about how jail(2) effects the securelevel.

Browse Source 
Reviewed by:	rwatson
Approved by:	blackend (mentor)
This commit is contained in:
Ken Smith 2003-11-11 18:21:20 +00:00
parent d3c01334ce
commit 056f33311a
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=122503
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/libc/sys/jail.2
View File

@ -82,6 +82,12 @@ can be manipulated all the ways a root can normally do it, including
.Dq Li "rm -rf /*"
but new device special nodes cannot be created because they reference
shared resources (the device drivers in the kernel).
The effective
.Dq securelevel
for a process is the greater of the global
.Dq securelevel
or, if present, the per-jail
.Dq securelevel .
.Pp
All IP activity will be forced to happen to/from the IP number specified,
which should be an alias on one of the network interfaces.