From b2206719c52ccbf1cba4de85065c600573b0a9ba Mon Sep 17 00:00:00 2001 From: "Simon L. B. Nielsen" Date: Tue, 4 May 2004 14:39:32 +0000 Subject: [PATCH] mdoc(7) cleanup for the last commit to this file. OK'ed by: bmilekic --- usr.sbin/jail/jail.8 | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8 index 9248632da335..9ed0d952dcfc 100644 --- a/usr.sbin/jail/jail.8 +++ b/usr.sbin/jail/jail.8 @@ -404,11 +404,18 @@ the future this functionality may be finer grained. .Bl -tag -width XXX .It Va security.jail.allow_raw_sockets This MIB entry determines whether or not prison root is allowed to -create raw sockets. Setting this MIB to 1 allows utilities like -ping(8) and traceroute(8) to operate inside the prison. If this MIB +create raw sockets. +Setting this MIB to 1 allows utilities like +.Xr ping 8 +and +.Xr traceroute 8 +to operate inside the prison. +If this MIB is set, the source IP addresses are enforced to comply with the IP address bound to the jail, regardless of whether or not -the IP_HDRINCL flag has been set on the socket. +the +.Dv IP_HDRINCL +flag has been set on the socket. .It Va security.jail.set_hostname_allowed This MIB entry determines whether or not processes within a jail are allowed to change their hostname via