upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-02-10 06:15:40 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

devfs.rules: unhide pf in vnet jails

Browse source 
/dev/pf is usable in vnet jails, so don't hide the node there.

We shouldn't expose /dev/pf in regular jails, as that gives them control over
the host (or parent vnet jail) firewall.

Reviewed by:	bz
Differential Revision:	https://reviews.freebsd.org/D26537
This commit is contained in:
Kristof Provost 2020-10-05 19:26:54 +00:00
parent 2622708419
commit 9e9be081d8
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
sbin/devfs/devfs.rules
View file

@ -86,3 +86,7 @@ add include $devfsrules_unhide_basic
add include $devfsrules_unhide_login
add path fuse unhide
add path zfs unhide
[devfsrules_jail_vnet=5]
add include $devfsrules_jail
add path pf unhide