src/sbin/devfs/devfs.rules, branch upstream/13.1.0FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=upstream%2F13.1.02021-11-24T16:45:51Zdevfs.rules: Correctly unhide pf in vnet jails2021-11-24T16:45:51ZZhenlei Huangzlei.huang@gmail.com2021-11-03T11:46:48Zurn:sha1:eaab06d53dfa7fbf926a2c19aa00a6804b5e6349
Revision 9e9be081d8 introduced a new devfs rule devfsrules_jail_vnet. It
includes rule devfsrules_jail which include other rules. Unfortunately
devfs could not recursively parse the action include and thus
devfsrules_jail_vnet will expose all nodes.
PR: 255660
Reviewed by: kp
Obtained from: Gijs Peskens <gijs@peskens.net>
MFC after: 3 weeks
Differential Revision: https://reviews.freebsd.org/D32814
(cherry picked from commit 7acd322ebe2072b1d73b1d19c14ab12a300ba8e8)
devfs.rules: unhide pf in vnet jails2020-10-05T19:26:54ZKristof Provostkp@FreeBSD.org2020-10-05T19:26:54Zurn:sha1:9e9be081d8a6a3ded373db51c8bd13189c979979
/dev/pf is usable in vnet jails, so don't hide the node there.
We shouldn't expose /dev/pf in regular jails, as that gives them control over
the host (or parent vnet jail) firewall.
Reviewed by: bz
Differential Revision: https://reviews.freebsd.org/D26537
Move all devfs related files to sbin/devfs/2018-08-22T15:55:23ZBrad Davisbrd@FreeBSD.org2018-08-22T15:55:23Zurn:sha1:39cec25ba73b28a104d7f050610e141e47239262
This is related to pkgbase as it uses CONFS to properly tag these as config
files.
Approved by: will (mentor)
Differential Revision: https://reviews.freebsd.org/D16785