jail.8: Update the man page for allow.nfsd

Commit bba7a2e89602 added "allow.nfsd" to optionally allow
mountd/nfsd to be run inside a vnet prison when the kernel
is built with "options VNET_NFSD".

This patch updates the man page for this change.

This is a content change.

(cherry picked from commit d4b4f3b9c356938de6140ccea20d502d207b18a7)

1 files changed, 14 insertions, 1 deletions

diff --git a/usr.sbin/jail/jail.8 b/usr.sbin/jail/jail.8
index c1eee3226593..c9d929b89d4a 100644
--- a/usr.sbin/jail/jail.8
+++ b/usr.sbin/jail/jail.8
@@ -25,7 +25,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd July 18, 2022
+.Dd December 11, 2022
 .Dt JAIL 8
 .Os
 .Sh NAME
@@ -584,6 +584,19 @@ or
 memory subject to
 .Va security.bsd.unprivileged_mlock
 and resource limits.
+.It Va allow.nfsd
+The
+.Xr mountd 8
+and
+.Xr nfsd 8
+daemons are permitted to run inside a vnet-enabled jail.
+The kernel must have been compiled with the
+.Sy VNET_NFSD option
+and
+.Sy NFSD option
+as well as the
+.Sy VIMAGE option
+for this to be available.
 .It Va allow.reserved_ports
 The jail root may bind to ports lower than 1024.
 .It Va allow.unprivileged_proc_debug