FreeBSD 14 – jailed application cannot access devices due to devfs ruleset mismatch

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Processes in jail fail with permission denied when opening expected device nodes.

Environment & Reproduction

Appears after jail migration or host devfs.rules edits.

jls
cat /etc/devfs.rules
mount | grep devfs

Root Cause Analysis

Assigned devfs ruleset does not expose required devices or applies restrictive mode bits.

Quick Triage

Check jail devfs_ruleset value and current mounted devfs behavior.

jls -v | grep -E 'jid|name|path|devfs'
service jail status

Step-by-Step Diagnosis

Validate ruleset contents and test availability from within jail namespace.

devfs rule showsets
devfs rule -s  show
jexec  ls -l /dev

Solution – Primary Fix

Create or adjust dedicated ruleset and reattach devfs to jail.

vi /etc/devfs.rules
service devfs restart
service jail restart

Solution – Alternative Approaches

Use minimal expose-only strategy for each workload class.

devfs rule -s  add path null unhide
devfs rule -s  add path random unhide

Verification & Acceptance Criteria

Jailed application opens required devices without broad overexposure.

jexec  ls -l /dev/
jexec  

Rollback Plan

Revert to prior ruleset and restart jail if unintended device visibility appears.

cp /root/backup/devfs.rules /etc/devfs.rules
service jail restart

Prevention & Hardening

Version-control devfs rules and require workload-specific review before merge.

sha256 /etc/devfs.rules
logger -t jail 'devfs rules validated'

Related Errors & Cross-Refs

Can be misdiagnosed as file-system ACL problems inside jail root.

Related tutorial: View the step-by-step tutorial for FreeBSD 14.

View all FreeBSD 14 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

devfs, jail, and security hardening sections of FreeBSD documentation.