mirror/freebsd
1
0
Fork 0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-15 10:17:20 +00:00
Code Issues Releases Activity

Document recently added security.mac.portacl.autoport_exempt tunable.

Browse Source 
Outraced the speed of doc request:	trhodes
This commit is contained in:
Tom Rhodes 2004-12-08 15:58:38 +00:00
parent ef237c7faf
commit bb87c37947
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=138563
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
share/man/man4/mac_portacl.4
View File

@ -203,6 +203,14 @@ Allow superuser (i.e., root) to bind to all
protected ports, even if the port access control list does not
explicitly allow this.
(Default: 1).
.It Va security.mac.portacl.autoport_exempt
Allow applications to use automatic binding to port 0.
Often applications will use port 0 as a request for
automatic port allocation before binding an IP address to
a socket. This tunable will exempt port 0 allocation from
rule checking when a low port is required and
.Dv IP_PORTRANGELOW
is set to a value above 1.
.El
.Sh SEE ALSO
.Xr mac 3 ,