mirror of
https://github.com/opnsense/src.git
synced 2026-06-09 08:43:19 -04:00
Document recently added security.mac.portacl.autoport_exempt tunable.
Outraced the speed of doc request: trhodes
This commit is contained in:
parent
ef237c7faf
commit
bb87c37947
1 changed files with 8 additions and 0 deletions
|
|
@ -203,6 +203,14 @@ Allow superuser (i.e., root) to bind to all
|
|||
protected ports, even if the port access control list does not
|
||||
explicitly allow this.
|
||||
(Default: 1).
|
||||
.It Va security.mac.portacl.autoport_exempt
|
||||
Allow applications to use automatic binding to port 0.
|
||||
Often applications will use port 0 as a request for
|
||||
automatic port allocation before binding an IP address to
|
||||
a socket. This tunable will exempt port 0 allocation from
|
||||
rule checking when a low port is required and
|
||||
.Dv IP_PORTRANGELOW
|
||||
is set to a value above 1.
|
||||
.El
|
||||
.Sh SEE ALSO
|
||||
.Xr mac 3 ,
|
||||
|
|
|
|||
Loading…
Reference in a new issue