svcj: add "routing" option
ClosedPublic
Actions

Authored by ivy on Apr 15 2025, 5:57 PM.

Details

Reviewers

jamie
kevans
des

Group Reviewers

network
Jails
manpages

Commits

rG0268d03ba195: svcj: add "routing" option

Summary

"routing" enables the jail allow.routing permission, which allows the jail to
modify the system routing table. this can be used to run routing daemons
(e.g., BIRD) in a service jail.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

ivy created this revision.Apr 15 2025, 5:57 PM

Herald added subscribers: ziaee, imp. · View Herald TranscriptApr 15 2025, 5:57 PM

ivy requested review of this revision.Apr 15 2025, 5:57 PM

Harbormaster completed remote builds in B63525: Diff 153695.Apr 15 2025, 5:57 PM

ivy added a parent revision: D49843: jail: add allow.routing jail permission.Apr 15 2025, 5:57 PM

ziaee accepted this revision as: manpages.Apr 15 2025, 7:54 PM

ziaee added a reviewer: manpages.

guest-patmaddox added a subscriber: guest-patmaddox.Apr 15 2025, 9:12 PM

ivy mentioned this in D49843: jail: add allow.routing jail permission.Apr 16 2025, 11:21 PM

ivy added reviewers: kevans, des.Apr 19 2025, 9:29 AM

jamie accepted this revision.Apr 19 2025, 3:56 PM

This revision is now accepted and ready to land.Apr 19 2025, 3:56 PM

This change depends on https://reviews.freebsd.org/D49843, which is still contentious and unresolved.

des accepted this revision.May 10 2025, 8:29 PM

Closed by commit rG0268d03ba195: svcj: add "routing" option (authored by ivy). · Explain WhyMay 12 2025, 10:27 PM

This revision was automatically updated to reflect the committed changes.

ivy added a commit: rG0268d03ba195: svcj: add "routing" option.

Revision Contents
Changeset List

Path

Size

libexec/

rc/

rc.subr

3 lines

share/

man/

man5/

rc.conf.5

4 lines

Diff 155360

View Options

libexec/rc/rc.subr