Disallow various debug.kdb sysctl's when securelevel is raised.

PR:	161350

1 files changed, 6 insertions, 0 deletions

diff --git a/share/man/man7/security.7 b/share/man/man7/security.7
index ed24435a..197fe3e 100644
--- a/share/man/man7/security.7
+++ b/share/man/man7/security.7
@@ -544,6 +544,12 @@ may not be opened for writing;
 kernel modules (see
 .Xr kld 4 )
 may not be loaded or unloaded.
+The kernel debugger may not be entered using the
+.Va debug.kdb.enter
+sysctl.
+A panic or trap cannot be forced using the
+.Va debug.kdb.panic
+and other sysctl's.
 .It Ic 2
 Highly secure mode \- same as secure mode, plus disks may not be
 opened for writing (except by