freebsd / iocage / 12027133868

8%

push

github

ioc_start.py: allow 'none' bridge in interfaces (#47)

Iocage currently expects interfaces to be specified in the nic:bridge
format, where bridge cannot be none. This results in iocage always
creating a bridge to which VNET jail epair interfaces are added as
members.

In a scenario where the user wants jails to be isolated on the data-link
layer (OSI layer 2 / Ethernet) and use the host as a router, this bridge
is unnecessery. It can also result in illegitimate cross-jail traffic
being allowed, since pf filtering on bridge interfaces is disabled by
default on FreeBSD systems (net.link.bridge.pfil_bridge=0).

Closes #44

58 of 3259 branches covered (1.78%)

Branch coverage included in aggregate %.

0 of 3 new or added lines in 1 file covered. (0.0%)

798 of 7803 relevant lines covered (10.23%)

0.2 hits per line