tests/mac_ipacl: restore sysctls after modificationWhile here, use 'required_kmods' instead of ad-hocchecks.Signed-off-by: Siva Mahadevan <me@svmhdvn.name>Reviewed by: markjMFC after: 3 days
tests/mac_ipacl: restore sysctls after modificationWhile here, use 'required_kmods' instead of ad-hocchecks.Signed-off-by: Siva Mahadevan <me@svmhdvn.name>Reviewed by: markjMFC after: 3 daysSponsored by: The FreeBSD FoundationPull request: https://github.com/freebsd/freebsd-src/pull/1856
show more ...
Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix
Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
mac_ipacl: new MAC policy module to limit jail/vnet IP configurationThe mac_ipacl policy module enables fine-grained control over IP addressconfiguration within VNET jails from the base system.It
mac_ipacl: new MAC policy module to limit jail/vnet IP configurationThe mac_ipacl policy module enables fine-grained control over IP addressconfiguration within VNET jails from the base system.It allows the root user to define rules governing IP addresses forjails and their interfaces using the sysctl interface.Requested by: multipleSponsored by: Google, Inc. (GSoC 2019)MFC after: 2 monthsReviewed by: bz, dch (both earlier versions)Differential Revision: https://reviews.freebsd.org/D20967