d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Document the fact that VTY locking is easily bypassable when DDB

Browse Source 
is compiled in the kernel.  Also add some useful xrefs to lock(1).
This commit is contained in:
Maxime Henrion 2003-02-27 18:25:26 +00:00
parent 03ab197379
commit 356168f5cc
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=111633
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
usr.bin/lock/lock.1
View File

@ -70,10 +70,14 @@ This option is implemented in a way similar to the
.Fl S
option of
.Xr vidcontrol 1 ,
and is only available if the terminal in question is a
and thus has the same restrictions.
It is only available if the terminal in question is a
.Xr syscons 4
virtual terminal.
.El
.Sh SEE ALSO
.Xr vidcontrol 1 ,
.Xr syscons 4
.Sh HISTORY
The
.Nm

4
usr.sbin/vidcontrol/vidcontrol.1
View File

@ -228,6 +228,10 @@ Turn vty switching on or off.
When vty switching is off,
attempts to switch to a different virtual terminal will fail.
(The default is to permit vty switching.)
This protection can be easily bypassed when the kernel is compiled with
the DDB option.
However, you probably shouldn't compile the kernel debugger on a box which
is supposed to be physically secure.
.It Fl s Ar number
Set the current vty to
.Ar number .