Bug 188018

Summary: [jail] [vimage] Running pfctl -sr -v in Jail with VIMAGE crashes host
Product: Base System Reporter: Philipp Schmid <philipp.schmid>
Component: kernAssignee: freebsd-jail (Nobody) <jail>
Status: Closed DUPLICATE    
Severity: Affects Only Me CC: rodrigc
Priority: Normal    
Version: Unspecified   
Hardware: Any   
OS: Any   

Description Philipp Schmid 2014-03-27 15:20:00 UTC 
I have a jail running with VIMAGE enabled.
The host is using PF for packet filtering.

The script:

    /etc/periodic/security/520.pfdenied

gets run daily at 4:00 am CET every day per default.

520.pfdenied runs the command:

   pfctl -sr -v

If pfctl -sr -v is executed in the jail by the script or by hand, the
host reboots/crashes immediately.

How-To-Repeat: Setup FreeBSD 10.


Compile a kernel with the following config:

root@host:~ # diff kernels/RNA /usr/src/sys/amd64/conf/GENERIC
22c22
< ident         RNA
---
> ident         GENERIC
345,356d344
< 
< # IPSec
< options   IPSEC        #IP security
< device    crypto
< options   IPSEC_FILTERTUNNEL
< device    enc
< 
< # Virtual networking for jail
< options VIMAGE
< device epair
< device if_bridge

Enable PF on the host.

Create a Jail.

Run: pfctl -sr -v

Crash
Comment 1 Mark Linimon freebsd_committer freebsd_triage 2014-04-20 01:37:33 UTC 
Responsible Changed
From-To: freebsd-bugs->freebsd-jail

Over to maintainer(s).
Comment 2 Craig Rodrigues freebsd_committer freebsd_triage 2014-12-13 12:33:12 UTC 

*** This bug has been marked as a duplicate of bug 194515 ***