diff options
| author | ru <ru@FreeBSD.org> | 2004-07-02 23:13:00 +0000 |
|---|---|---|
| committer | ru <ru@FreeBSD.org> | 2004-07-02 23:13:00 +0000 |
| commit | 6294018a208cf7742b1c021a9b75c26962505571 (patch) | |
| tree | 502f17eb951b74c914af346cd4dbff252350c082 /usr.sbin/jail | |
| parent | 3f44360851448f8816c22f6b72e8dd5c9924c27f (diff) | |
| download | FreeBSD-src-6294018a208cf7742b1c021a9b75c26962505571.zip FreeBSD-src-6294018a208cf7742b1c021a9b75c26962505571.tar.gz | |
Mechanically kill hard sentence breaks.
Diffstat (limited to 'usr.sbin/jail')
| -rw-r--r-- | usr.sbin/jail/jail.8 | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8 index 6e159a1..a3b20d5 100644 --- a/usr.sbin/jail/jail.8 +++ b/usr.sbin/jail/jail.8 @@ -423,9 +423,11 @@ is set, the source IP addresses are enforced to comply with the IP address bound to the jail, regardless of whether or not the .Dv IP_HDRINCL -flag has been set on the socket. Since raw sockets can be used to configure +flag has been set on the socket. +Since raw sockets can be used to configure and interact with various network subsystems, extra caution should be used -where privileged access to jails is given out to untrusted parties. As such, +where privileged access to jails is given out to untrusted parties. +As such, by default this option is disabled. .It Va security.jail.getfsstatroot_only This MIB entry determines whether or not processes within a jail are able |
