o Introduce "options REGRESSION", a kernel option which enables

  interfaces and functionality intended for use during correctness and
  regression testing.  Features enabled by "options REGRESSION" may
  in and of themselves introduce security or correctness problems if
  used improperly, and so are not intended for use in production
  systems, only in testing environments.

Obtained from:	TrustedBSD Project

2 files changed, 10 insertions, 0 deletions

diff --git a/sys/conf/NOTES b/sys/conf/NOTES
index 3513ef3..e4e3635 100644
--- a/sys/conf/NOTES
+++ b/sys/conf/NOTES
@@ -374,6 +374,15 @@ options 	INVARIANT_SUPPORT
 options 	DIAGNOSTIC
 
 #
+# REGRESSION causes optional kernel interfaces necessary only for regression
+# testing to be enabled.  These interfaces may consitute security risks
+# when enabled, as they permit processes to easily modify aspects of the
+# run-time environment to reproduce unlikely or unusual (possibly normally
+# impossible) scenarios.
+#
+options		REGRESSION
+
+#
 # PERFMON causes the driver for Pentium/Pentium Pro performance counters
 # to be compiled.  See perfmon(4) for more information.
 #
diff --git a/sys/conf/options b/sys/conf/options
index 07dff22..85b6c18 100644
--- a/sys/conf/options
+++ b/sys/conf/options
@@ -375,6 +375,7 @@ DIAGNOSTIC		opt_global.h
 ENABLE_VFS_IOOPT	opt_global.h
 INVARIANT_SUPPORT	opt_global.h
 INVARIANTS		opt_global.h
+REGRESSION		opt_global.h
 SIMPLELOCK_DEBUG	opt_global.h
 VFS_BIO_DEBUG		opt_global.h