[PC-BSD Testing] Comments on Warden

Axel Gonzalez loox at e-shell.net
Thu Oct 11 12:20:24 PDT 2012


Dunno if it is documentation or a sanity check.. but when it asks for
ips it should give more info.. like the ip should be in the same net
segment as the host (to have inet access), also don't use duplicates
(assigned by dhcp)

Also a must is to check that it doesn't allow the host the host ip,
after the ifconfig, it messes up the address for the host (netmask
0xffffffff), disabling all inet access

And ping is not allowed inside jails (RC1) same for jail_sysvipc_allow
(used by postgres)


This has been discussed on IRC, so it would be nice to have more devels
in there.. if just to read what is brought up


Greetings

-- 
Thu Oct 11 14:13:29 2012 GMT

      **
   ***
 ****
*****
*****
 ****
   ***
      **        25.


More information about the Testing mailing list