From owner-cvs-all Tue Jul 31 10:27:11 2001 Delivered-To: cvs-all@freebsd.org Received: from elvis.mu.org (elvis.mu.org [216.33.66.196]) by hub.freebsd.org (Postfix) with ESMTP id C6E7537B401; Tue, 31 Jul 2001 10:27:02 -0700 (PDT) (envelope-from bright@elvis.mu.org) Received: by elvis.mu.org (Postfix, from userid 1192) id AF3C481D05; Tue, 31 Jul 2001 12:27:02 -0500 (CDT) Date: Tue, 31 Jul 2001 12:27:02 -0500 From: Alfred Perlstein To: Robert Watson Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/kern kern_prot.c Message-ID: <20010731122702.E26571@elvis.mu.org> References: <20010731111224.A26571@elvis.mu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from rwatson@FreeBSD.org on Tue, Jul 31, 2001 at 12:49:41PM -0400 Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG * Robert Watson [010731 11:49] wrote: > > On Tue, 31 Jul 2001, Alfred Perlstein wrote: > > > * Robert Watson [010731 10:53] wrote: > > > rwatson 2001/07/31 08:48:21 PDT > > > > > > Modified files: > > > sys/kern kern_prot.c > > > Log: > > > o Introduce new kern.security sysctl tree for kernel security policy > > > MIB entries. > > > o Relocate kern.suser_permitted to kern.security.suser_permitted. > > > > Sysctls _probably_ shouldn't be relocated, since they point to memory > > locations and/or functions there's really nothing wrong with providing > > the old one just to keep people's startup scripts from failing on them. > > > > If kern.suser_permitted has only been visible in the 5.x tree then feel > > free to rename it, however if it has been seen in 4.x then I suggest you > > rethink renaming something that people may already be depending on being > > set for security reasons in thier startup scripts. > > Normally I wouldn't relocate a sysctl without leaving behind compatibility > stuff (or maybe not at all)--fortunatelly, as you point out, this was > never MFC'd to RELENG_4, so shouldn't be a problem. Ok, should have checked CVS history before shooting off that email, but then again at least people know about the consequences of changing a sysctl now. :) -- -Alfred Perlstein [alfred@freebsd.org] Ok, who wrote this damn function called '??'? And why do my programs keep crashing in it? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message