K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2000-10-29T19:25:39.000000Z
K 7
svn:log
V 781
MFC of jail fixups:

  1.7       +9 -2      src/sys/kern/kern_jail.c
  1.73      +10 -1     src/sys/kern/uipc_socket.c
  1.9       +2 -1      src/sys/sys/jail.h

For reference:

  o Modify jail to limit creation of sockets to UNIX domain sockets,
    TCP/IP (v4) sockets, and routing sockets.  Previously, interaction
    with IPv6 was not well-defined, and might be inappropriate for some
    environments.  Similarly, sysctl MIB entries providing interface
    information also give out only addresses from those protocol domains.

    For the time being, this functionality is enabled by default, and
    toggleable using the sysctl variable jail.socket_unixiproute_only.
    In the future, protocol domains will be able to determine whether or
    not they are ``jail aware''.

END