hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-11-23 10:21:11 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

sysctl(8): Mention more security.bsd knobs; Refer to security(7)

Browse Source 
Reviewed by:            mhorne, pauamma_gundo.com, emaste
MFC after:              2 weeks
Sponsored by:           Kumacom SAS
Differential Revision:  https://reviews.freebsd.org/D41113
This commit is contained in:
Olivier Certner 2023-08-18 01:54:49 +02:00 committed by Mitchell Horne
parent d952820105
commit 8d7a48d367
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
sbin/sysctl/sysctl.8
View File

@ -27,7 +27,7 @@
.\" .\"
.\" From: @(#)sysctl.8 8.1 (Berkeley) 6/6/93 .\" From: @(#)sysctl.8 8.1 (Berkeley) 6/6/93
.\" .\"
.Dd December 24, 2022 .Dd August 18, 2023
.Dt SYSCTL 8 .Dt SYSCTL 8
.Os .Os
.Sh NAME .Sh NAME
@ -194,7 +194,9 @@ for more information on which tunables are available and how to set them.
.Pp .Pp
The string and integer information is summarized below. The string and integer information is summarized below.
For a detailed description of these variables see For a detailed description of these variables see
.Xr sysctl 3 . .Xr sysctl 3
and
.Xr security 7 .
.Pp .Pp
The changeable column indicates whether a process with appropriate The changeable column indicates whether a process with appropriate
privilege can change the value. privilege can change the value.
@ -231,6 +233,8 @@ String and integer values can be set using
.It "kern.logsigexit integer yes" .It "kern.logsigexit integer yes"
.It "security.bsd.suser_enabled integer yes" .It "security.bsd.suser_enabled integer yes"
.It "security.bsd.see_other_uids integer yes" .It "security.bsd.see_other_uids integer yes"
.It "security.bsd.see_other_gids integer yes"
.It "security.bsd.see_jail_proc integer yes"
.It "security.bsd.unprivileged_proc_debug integer yes" .It "security.bsd.unprivileged_proc_debug integer yes"
.It "security.bsd.unprivileged_read_msgbuf integer yes" .It "security.bsd.unprivileged_read_msgbuf integer yes"
.It "vm.loadavg struct no" .It "vm.loadavg struct no"
@ -320,6 +324,7 @@ option has been deprecated and is silently ignored.
.Xr sysctl 3 , .Xr sysctl 3 ,
.Xr loader.conf 5 , .Xr loader.conf 5 ,
.Xr sysctl.conf 5 , .Xr sysctl.conf 5 ,
.Xr security 7,
.Xr loader 8 .Xr loader 8
.Sh HISTORY .Sh HISTORY
A A