Add debugging (for a case that shouldn't arise, but makes it more obvious

if a menu addition is made in one plce but forgotten in another).

3 files changed, 6 insertions, 0 deletions

diff --git a/usr.sbin/bsdconfig/security/include/messages.subr b/usr.sbin/bsdconfig/security/include/messages.subr
index ddee89b..f6df667 100644
--- a/usr.sbin/bsdconfig/security/include/messages.subr
+++ b/usr.sbin/bsdconfig/security/include/messages.subr
@@ -46,3 +46,5 @@ msg_securelevel_desc="Configure securelevels for the system"
 msg_securelevels_menu_text="This menu allows you to select the securelevel your system runs with.\nWhen operating at a securelevel, certain root privileges are disabled,\nwhich may increase resistance to exploits and protect system integrity.\nIn secure mode system flags may not be overridden by the root user,\naccess to direct kernel memory is limited, and kernel modules may not\nbe changed.  In highly secure mode, mounted file systems may not be\nmodified on-disk, tampering with the system clock is prohibited.  In\nnetwork secure mode configuration changes to firewalling are prohibited.\n "
 msg_securelevels_menu_title="Securelevel Configuration Menu"
 msg_system_security_options_menu="System Security Options Menu"
+msg_unknown_kern_securelevel_selection="Unknown kern.securelevel selection"
+msg_unknown_security_menu_selection="Unknown security menu selection"
diff --git a/usr.sbin/bsdconfig/security/kern_securelevel b/usr.sbin/bsdconfig/security/kern_securelevel
index 3563ae2..bc62266 100755
--- a/usr.sbin/bsdconfig/security/kern_securelevel
+++ b/usr.sbin/bsdconfig/security/kern_securelevel
@@ -158,6 +158,8 @@ case "$mtag" in
 	f_sysrc_set kern_securelevel_enable "YES"
 	f_sysrc_set kern_securelevel "3" 
 	;;
+*)
+	f_die 1 "$msg_unknown_kern_securelevel_selection"
 esac
 
 exit $SUCCESS
diff --git a/usr.sbin/bsdconfig/security/security b/usr.sbin/bsdconfig/security/security
index d267535..ef56605 100755
--- a/usr.sbin/bsdconfig/security/security
+++ b/usr.sbin/bsdconfig/security/security
@@ -165,6 +165,8 @@ while :; do
 		f_sysrc_set nfs_reserved_port_only "NO" ;;
 	"3 [ ] $msg_nfs_port") # Same; Toggle value
 		f_sysrc_set nfs_reserved_port_only "YES" ;;
+	*)
+		f_die 1 "$msg_unknown_security_menu_selection"
 	esac
 done