Ensure vdev only exposes the network devices allowed by its ACLs. This is particularly useful for containers and jails, which should not have full access to the network.
This is beyond the scope of vdev. If the administrator wants vdev to do things like setting up veth pairs when a particular interface comes up, he/she can do so with the appropriate action script.
Ensure vdev only exposes the network devices allowed by its ACLs. This is particularly useful for containers and jails, which should not have full access to the network.