From b67c360759d60e0ef995fccbe053c74540b206f8 Mon Sep 17 00:00:00 2001 From: mux Date: Thu, 27 Feb 2003 18:25:26 +0000 Subject: Document the fact that VTY locking is easily bypassable when DDB is compiled in the kernel. Also add some useful xrefs to lock(1). --- usr.sbin/vidcontrol/vidcontrol.1 | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'usr.sbin') diff --git a/usr.sbin/vidcontrol/vidcontrol.1 b/usr.sbin/vidcontrol/vidcontrol.1 index edde901..63252c0 100644 --- a/usr.sbin/vidcontrol/vidcontrol.1 +++ b/usr.sbin/vidcontrol/vidcontrol.1 @@ -228,6 +228,10 @@ Turn vty switching on or off. When vty switching is off, attempts to switch to a different virtual terminal will fail. (The default is to permit vty switching.) +This protection can be easily bypassed when the kernel is compiled with +the DDB option. +However, you probably shouldn't compile the kernel debugger on a box which +is supposed to be physically secure. .It Fl s Ar number Set the current vty to .Ar number . -- cgit v1.1