Re: 8.0 still allow creating ipv6 udp socket in jail without ipv6 ip

 Bjoern A. Zeeb wrote:
> On Sat, 25 Jul 2009, Mykola Dzham wrote:
> 
> Hi,
> 
> > After r188146 creating tcp ipv6 socket in jail without ipv6 ip is not
> > allowed, but udp socket is allowed.
> 
> I cannot really follow what you are trying to say as wrt IPv4 and IPv6
> sockets and what about UDP.
> 
> Your sample further down is trying to use an IPv4 address on an IPv6
> Datagram socket which is an error either way.

Some java programms attempt to use ipv6 sockets, then use ipv4 if
socket(AF_INET6,...) fail. My sample imitate this 

> Prior to FreeBSD 7.2 IPv6 hadn't been supported at all for jails.
> 
> With 7.2 it was possible to create IPv6 sockets (but only shortly and
> then fail on bind/connect/...).  With the commit you reference the
> "Protocol not supported" came back in case there was no address of
> that address family for a given jail.
> 
> With 8 the primary syntax for jails has changed and the "backward
> compat mode" again allows you to create a socket on a jail even if
> no address of the same family was configured for the jail.
> 
> This should be addressed by the following patch:
> http://people.freebsd.org/~bz/20090727-01-jail8-legacy.diff
> 
> Can you give it a try and report if that fixes your problem?

Patch aplied cleanly on r195820 , but jail can not start after patching:

# jail -l -U root -i /usr/home/d/guests/tap2 tap2.my.domain.com 10.112.0.151 /bin/sh /etc/rc
jail: ip6: unknown boolean value "disable"

-- 
LEFT-(UANIC|RIPE)
JID: levsha_at_jabber.net.ua
PGP fingerprint: 2A0B 7423 51AF B19B 74D5  31CA 2BFF 42F1 8094 7652