Page MenuHomeFreeBSD

tcp: Fix expiring and purging hostcache entries of vnet jails
ClosedPublic

Authored by zlei on Sep 23 2025, 3:29 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Mar 11, 11:31 AM
Unknown Object (File)
Sun, Mar 8, 12:40 AM
Unknown Object (File)
Sat, Mar 7, 9:11 PM
Unknown Object (File)
Sat, Mar 7, 9:50 AM
Unknown Object (File)
Sat, Mar 7, 6:53 AM
Unknown Object (File)
Fri, Mar 6, 10:46 AM
Unknown Object (File)
Wed, Mar 4, 1:50 PM
Unknown Object (File)
Sat, Feb 28, 3:05 AM

Details

Summary

A jailed process, sysctl -j foo or jexec foo sysctl, do not have
privilege to write to non-vnet sysctls but only to those marked as jail
writable, aka sysctls those marked with CTLFLAG_VNET flag.

Without this change we will get EPERM when trying to expire and purge
hostcache entries of vnet jails via the net.inet.tcp.hostcache.purgenow
sysctl. Fix that by adding a CTLFLAG_VNET flag.

Fixes: 264563806496 Add a new sysctl net.inet.tcp.hostcache.purgenow=1 to expire ...
MFC after: 3 days

Test Plan

Expire entries in hostcache of a jail immediately.

# jail -c name=foo vnet persist
#sysctl -j foo net.inet.tcp.hostcache.purgenow=1
net.inet.tcp.hostcache.purgenow: 0 -> 0

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable