From owner-cvs-src  Sun Mar  9 14:49:50 2003
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id EDA0937B401; Sun,  9 Mar 2003 14:49:48 -0800 (PST)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id A296B43F85; Sun,  9 Mar 2003 14:49:48 -0800 (PST)
	(envelope-from dwmalone@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h29Mnm0U080701;
	Sun, 9 Mar 2003 14:49:48 -0800 (PST)
	(envelope-from dwmalone@repoman.freebsd.org)
Received: (from dwmalone@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h29Mnma3080700;
	Sun, 9 Mar 2003 14:49:48 -0800 (PST)
Message-Id: <200303092249.h29Mnma3080700@repoman.freebsd.org>
From: David Malone <dwmalone@FreeBSD.org>
Date: Sun, 9 Mar 2003 14:49:48 -0800 (PST)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/dev/kbd kbd.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-src@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-src.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-src>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-src>
X-Loop: FreeBSD.ORG

dwmalone    2003/03/09 14:49:48 PST

  FreeBSD src repository

  Modified files:
    sys/dev/kbd          kbd.c 
  Log:
  Add a a sysctl, hw.kbd.keymap_restrict_change, which acts a bit
  like secure level but which restricts changes to the keymap. Its
  values impose the following restrictions:
  
  0: No restriction - this is the default.
  1: Only root can change restricted keys (like boot, panic, ...)
  2: Only root can change restricted keys and regular keys.
     Other users still can change accents and function keys.
  3: Only root can change restricted keys, regular keys and accents.
  4: Only root can change any of the keymap (restricted keys, regular
        keys, accents and function keys).
  
  Unfortunately, the keyboard's accent map is cleared when a new keymap
  is loaded, which makes the distinction between level 3 and level 4
  less useful.
  
  The MAC guys might like to make this a policy?
  
  No objections from: -audit about 6 moths ago
  
  Revision  Changes    Path
  1.33      +144 -0    src/sys/dev/kbd/kbd.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-src" in the body of the message