]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
devfs.rules: unhide pf in vnet jails
authorkp <kp@FreeBSD.org>
Mon, 5 Oct 2020 19:26:54 +0000 (19:26 +0000)
committerkp <kp@FreeBSD.org>
Mon, 5 Oct 2020 19:26:54 +0000 (19:26 +0000)
commit2b52891d75ec5c710d69486fc3bb529d5abbd775
tree57f3818fbf9b789a14860414afe373c0b056aeb3
parentbe830cb3a5753af3cb3913fd087e4380329c3375
devfs.rules: unhide pf in vnet jails

/dev/pf is usable in vnet jails, so don't hide the node there.

We shouldn't expose /dev/pf in regular jails, as that gives them control over
the host (or parent vnet jail) firewall.

Reviewed by: bz
Differential Revision: https://reviews.freebsd.org/D26537
sbin/devfs/devfs.rules