From owner-cvs-all  Fri Nov 30 13:40:57 2001
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id AEED437B419; Fri, 30 Nov 2001 13:40:52 -0800 (PST)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id fAULeq956949;
	Fri, 30 Nov 2001 13:40:52 -0800 (PST)
	(envelope-from rwatson)
Message-Id: <200111302140.fAULeq956949@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Fri, 30 Nov 2001 13:40:52 -0800 (PST)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/kern subr_prf.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2001/11/30 13:40:52 PST

  Modified files:
    sys/kern             subr_prf.c 
  Log:
  o Introduce kern.security.bsd.unprivileged_read_msgbuf, which allows
    the administrator to restrict access to the kernel message buffer.
    It defaults to '1', which permits access, but if set to '0', requires
    that the process making the sysctl() have appropriate privilege.
  o Note that for this to be effective, access to this data via system
    logs derived from /dev/klog must also be limited.
  
  Obtained from:  TrustedBSD Project
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.74      +13 -0     src/sys/kern/subr_prf.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message