From 65bbadfbbc492a65ec6daf676ff0ebeb766c9cc3 Mon Sep 17 00:00:00 2001
From: Robert Watson <rwatson@FreeBSD.org>
Date: Wed, 5 Dec 2001 18:49:20 +0000
Subject: [PATCH] o Make kern.security.bsd.suser_enabled TUNABLE.

Requested by:	green
---
 sys/kern/kern_prot.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sys/kern/kern_prot.c b/sys/kern/kern_prot.c
index c5e1dcf225c4..ccdad570ef5e 100644
--- a/sys/kern/kern_prot.c
+++ b/sys/kern/kern_prot.c
@@ -1202,6 +1202,7 @@ groupmember(gid, cred)
 int	suser_enabled = 1;
 SYSCTL_INT(_kern_security_bsd, OID_AUTO, suser_enabled, CTLFLAG_RW,
     &suser_enabled, 0, "processes with uid 0 have privilege");
+TUNABLE_INT("kern.security.bsd.suser_enabled", &suser_enabled);
 
 /*
  * Test whether the specified credentials imply "super-user" privilege.