diff options
| author | obrien <obrien@FreeBSD.org> | 2011-12-13 17:59:16 +0000 |
|---|---|---|
| committer | obrien <obrien@FreeBSD.org> | 2011-12-13 17:59:16 +0000 |
| commit | 47a0230f28b5b4b1ce6ffcf2fc815759e56452b5 (patch) | |
| tree | c990bc00c6ad30223cb5d4e9b7343d46075695ad /sys/kern/kern_shutdown.c | |
| parent | 753612fc80d5cc885147f19d09ab9c64c470d50a (diff) | |
| download | FreeBSD-src-47a0230f28b5b4b1ce6ffcf2fc815759e56452b5.zip FreeBSD-src-47a0230f28b5b4b1ce6ffcf2fc815759e56452b5.tar.gz | |
Disallow various debug.kdb sysctl's when securelevel is raised.
PR: 161350
Diffstat (limited to 'sys/kern/kern_shutdown.c')
| -rw-r--r-- | sys/kern/kern_shutdown.c | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/sys/kern/kern_shutdown.c b/sys/kern/kern_shutdown.c index 90a74b8..2ef4e13 100644 --- a/sys/kern/kern_shutdown.c +++ b/sys/kern/kern_shutdown.c @@ -102,8 +102,9 @@ int debugger_on_panic = 0; #else int debugger_on_panic = 1; #endif -SYSCTL_INT(_debug, OID_AUTO, debugger_on_panic, CTLFLAG_RW | CTLFLAG_TUN, - &debugger_on_panic, 0, "Run debugger on kernel panic"); +SYSCTL_INT(_debug, OID_AUTO, debugger_on_panic, + CTLFLAG_RW | CTLFLAG_SECURE | CTLFLAG_TUN, &debugger_on_panic, 0, + "Run debugger on kernel panic"); TUNABLE_INT("debug.debugger_on_panic", &debugger_on_panic); #ifdef KDB_TRACE @@ -111,8 +112,9 @@ static int trace_on_panic = 1; #else static int trace_on_panic = 0; #endif -SYSCTL_INT(_debug, OID_AUTO, trace_on_panic, CTLFLAG_RW | CTLFLAG_TUN, - &trace_on_panic, 0, "Print stack trace on kernel panic"); +SYSCTL_INT(_debug, OID_AUTO, trace_on_panic, + CTLFLAG_RW | CTLFLAG_SECURE | CTLFLAG_TUN, &trace_on_panic, 0, + "Print stack trace on kernel panic"); TUNABLE_INT("debug.trace_on_panic", &trace_on_panic); #endif /* KDB */ |
