jails How can I prevent mdconfig memory disks which are attached in the host from appearing in jails?

[ikevin8me]

How can I prevent mdconfig memory disks which are attached in the host from appearing in jails? That means, I do not want to see md0 md1 md2 being visible and accessible from jails.

(It's got to be a setting in the devfs.rules or jail.conf file, but I just figure it out.)

 

[cmoerz]

You need to choose a set of devfs rules via devfs_ruleset in your jail.conf. If you use a devfs rule set like this, you won't have any md nodes:

# Devices usually found in a jail.
#
[devfsrules_jail=4]
add include $devfsrules_hide_all
add include $devfsrules_unhide_basic
add include $devfsrules_unhide_login
add path zfs unhide