Brontekst bekijken van Jails: allow raw sockets

security.jail.allow_raw_sockets MIB entry determines whether or not prison root is allowed to create raw sockets. Setting this MIB to 1 allows utilities like ping and traceroute to operate inside the prison. Type the following command:

 # sysctl security.jail.allow_raw_sockets=1

Now login to jail using jexec:

 host # jexec 1 csh
 jail# ping cyberciti.biz

Add following line to sysctl.conf:

 # echo 'security.jail.allow_raw_sockets=1' >> /etc/sysctl.conf

In an iocage situation you need to set it with the iocage program:

 root@hermeticum:~ # iocage set allow_raw_sockets=1 hypnos
 allow_raw_sockets: 0 -> 1