Skip to content

Commit

Permalink
Merge pull request #641 from BastilleBSD/setup_vnet
Browse files Browse the repository at this point in the history
add support for bastille_vnet devfs.rules in bastille setup
  • Loading branch information
cedwards authored Nov 26, 2023
2 parents 32d67ae + dd60e7f commit bce28bf
Showing 1 changed file with 13 additions and 0 deletions.
13 changes: 13 additions & 0 deletions usr/local/share/bastille/setup.sh
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,19 @@ configure_vnet() {

info "Bringing up new interface: bastille1"
service netif cloneup

if [ ! -f /etc/devfs.rules ]; then
info "Creating bastille_vnet devfs.rules"
cat << EOF > /etc/devfs.rules
[bastille_vnet=13]
add include \$devfsrules_hide_all
add include \$devfsrules_unhide_basic
add include \$devfsrules_unhide_login
add include \$devfsrules_jail
add include \$devfsrules_jail_vnet
add path 'bpf*' unhide
EOF
fi
}

# Configure pf firewall
Expand Down

0 comments on commit bce28bf

Please sign in to comment.