Fix semantics in the documentation of the "jail_socket_unixiproute_only"

variable ("YES" vs. "NO") and be more precise and intuitive on what is
actually allowed/restricted by this variable ("UNIX/IP/route sockets"
vs. "TCP/IP protocols").

MFC after: 3 days
This commit is contained in:
Ralf S. Engelschall
2005-12-29 13:39:46 +00:00
parent f71ba3d4a7
commit 66c6b32654
+3 -3
View File
@@ -2960,9 +2960,9 @@ do not allow the root user in a jail to set its hostname.
.It Va jail_socket_unixiproute_only .It Va jail_socket_unixiproute_only
.Pq Vt bool .Pq Vt bool
If set to If set to
.Dq Li NO , .Dq Li YES ,
do not allow any protocol, do not allow any sockets,
besides TCP/IP, besides UNIX/IP/route sockets,
to be used within a jail. to be used within a jail.
.It Va jail_sysvipc_allow .It Va jail_sysvipc_allow
.Pq Vt bool .Pq Vt bool