Change Details

The man-page contains a reference to behavior of auto-jailing of sshd which requires a change which is not in this patch (but is in another review). ---This implementation depends upon a change for /usr/bin/service which is in https://reviews.freebsd.org/D40369--- committed This takes a rc.d-service and starts it in a jail which shares the same root-path as the host (or parent jail) and may inherit the network from the host (or parent jail). Per service there is the possibility to specify some arguments which gives more permissions (e.g. netv4, netv6, sysvipc...). See the included man page update for more info about the functionality.

The man-page contains a reference to behavior of auto-jailing of sshd which requires a change which is not in this patch (but is in another review). ---This implementation depends upon a change for /usr/bin/service which is in https://reviews.freebsd.org/D40369--- committed This takes a rc.d-service and starts it in a jail which shares the same root-path as the host (or parent jail) and may inherit the network from the host (or parent jail). Per service there is the possibility to specify some arguments which gives more permissions (e.g. netv4, netv6, sysvipc...). See the included man page update for more info about the functionality. Do we want to print "Starting svcj-name." instead of "Starting name." when starting services as a svcj, and similar for stop?

The man-page contains a reference to behavior of auto-jailing of sshd which requires a change which is not in this patch (but is in another review). ---This implementation depends upon a change for /usr/bin/service which is in https://reviews.freebsd.org/D40369--- committed This takes a rc.d-service and starts it in a jail which shares the same root-path as the host (or parent jail) and may inherit the network from the host (or parent jail). Per service there is the possibility to specify some arguments which gives more permissions (e.g. netv4, netv6, sysvipc...). See the included man page update for more info about the functionality. Do we want to print "Starting svcj-name." instead of "Starting name." when starting services as a svcj, and similar for stop?