Change Details

This depends upon: --https://reviews.freebsd.org/D40369-- committed https://reviews.freebsd.org/D40370 It gives more permissions to services (e.g. network access to services which require this) which are started as an automatic service jail (D40370). The sshd patch is important for the sshd-related functionality as described in the man-page of D40370. The location of the added env vars is supposed to allow overriding them in rc.conf. I'm not sure if the location is correct, or if this would also work if specified before load_rc_config. It's been a while since I implemented that and as my time is limited since a long time and I want to have this feature more available to the public, I decided to add a review and try to get this into shape with maybe a little bit of help/advise from others.

This depends upon: --https://reviews.freebsd.org/D40369-- committed https://reviews.freebsd.org/D40370 It gives more permissions to services (e.g. network access to services which require this) which are started as an automatic service jail (D40370). The sshd patch is important for the sshd-related functionality as described in the man-page of D40370. The location of the added env vars is supposed to allow overriding them in rc.conf, and to hard-disable the use of svcj for some parts where it doesn't make sense or will not work. Only a small subset of all of the services is tested.

This depends upon: --https://reviews.freebsd.org/D40369-- committed https://reviews.freebsd.org/D40370 It gives more permissions to services (e.g. network access to services which require this) which are started as an automatic service jail (D40370). The sshd patch is important for the sshd-related functionality as described in the man-page of D40370. The location of the added env vars is supposed to allow overriding them in rc.conf. I'm not sure if the location is correct, or if this would also work if specified before load_rc_config., It's been a while since I implemented that and as my time is limited since a long time and I want to have this feature more available to the public,and to hard-disable the use of svcj for some parts where it doesn't make sense or will not work. I decided to add a review and try to get this into shape with maybe a little bitOnly a small subset of all of help/advise from othersthe services is tested.