Fix typos from r339409.
Reported by: maxim Approved by: re (gjb)
This commit is contained in:
parent
e77f0bdcb5
commit
4520f617c9
@ -3352,7 +3352,7 @@ prison_priv_check(struct ucred *cred, int priv)
|
|||||||
return (0);
|
return (0);
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Do not allow a process inside a jail read the kernel
|
* Do not allow a process inside a jail to read the kernel
|
||||||
* message buffer unless explicitly permitted.
|
* message buffer unless explicitly permitted.
|
||||||
*/
|
*/
|
||||||
case PRIV_MSGBUF:
|
case PRIV_MSGBUF:
|
||||||
|
@ -553,7 +553,7 @@ with non-jailed parts of the system.
|
|||||||
Jailed users may read the kernel message buffer.
|
Jailed users may read the kernel message buffer.
|
||||||
If the
|
If the
|
||||||
.Va security.bsd.unprivileged_read_msgbuf
|
.Va security.bsd.unprivileged_read_msgbuf
|
||||||
MIB entry is zero, this will be restricted to to root user.
|
MIB entry is zero, this will be restricted to the root user.
|
||||||
.It Va allow.socket_af
|
.It Va allow.socket_af
|
||||||
Sockets within a jail are normally restricted to IPv4, IPv6, local
|
Sockets within a jail are normally restricted to IPv4, IPv6, local
|
||||||
(UNIX), and route. This allows access to other protocol stacks that
|
(UNIX), and route. This allows access to other protocol stacks that
|
||||||
|
Loading…
Reference in New Issue
Block a user