Bug 188018 - [jail] [vimage] Running pfctl -sr -v in Jail with VIMAGE crashes host
Summary: [jail] [vimage] Running pfctl -sr -v in Jail with VIMAGE crashes host
Status: Closed DUPLICATE of bug 194515
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: Unspecified
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-jail (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-03-27 15:20 UTC by Philipp Schmid
Modified: 2014-12-13 12:33 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Schmid 2014-03-27 15:20:00 UTC 
I have a jail running with VIMAGE enabled.
The host is using PF for packet filtering.

The script:

    /etc/periodic/security/520.pfdenied

gets run daily at 4:00 am CET every day per default.

520.pfdenied runs the command:

   pfctl -sr -v

If pfctl -sr -v is executed in the jail by the script or by hand, the
host reboots/crashes immediately.

How-To-Repeat: Setup FreeBSD 10.


Compile a kernel with the following config:

root@host:~ # diff kernels/RNA /usr/src/sys/amd64/conf/GENERIC
22c22
< ident         RNA
---
> ident         GENERIC
345,356d344
< 
< # IPSec
< options   IPSEC        #IP security
< device    crypto
< options   IPSEC_FILTERTUNNEL
< device    enc
< 
< # Virtual networking for jail
< options VIMAGE
< device epair
< device if_bridge

Enable PF on the host.

Create a Jail.

Run: pfctl -sr -v

Crash
Comment 1 Mark Linimon freebsd_committer freebsd_triage 2014-04-20 01:37:33 UTC 
Responsible Changed
From-To: freebsd-bugs->freebsd-jail

Over to maintainer(s).
Comment 2 Craig Rodrigues freebsd_committer freebsd_triage 2014-12-13 12:33:12 UTC 

*** This bug has been marked as a duplicate of bug 194515 ***