jails allow.mount.devfs without allow.mount works

Jail man page says:
allow.mount.devfs
privileged users inside the jail will be able to mount
and unmount the devfs file system. This permission is
effective only together with allow.mount and only when
enforce_statfs is set to a value lower than 2. The de-
vfs ruleset should be restricted from the default by
using the devfs_ruleset option.

Maybe I can set allow.mount.devfs in the jail config, but if I were to try to change it from inside the jail it won't work without the "allow.mount" in the jail config?
 
Maybe I can set allow.mount.devfs in the jail config, but if I were to try to change it from inside the jail it won't work without the "allow.mount" in the jail config?
allow.mount allows mounting within the jail. Normally filesystems (including devfs(5)) are mounted from the host side.
 
Back
Top