d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Disallow various debug.kdb sysctl's when securelevel is raised.

Browse Source 
PR:	161350
This commit is contained in:
obrien 2011-12-13 17:59:16 +00:00
parent 753612fc80
commit 47a0230f28
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
sys/kern/kern_shutdown.c
View File

@ -102,8 +102,9 @@ int debugger_on_panic = 0;
#else
int debugger_on_panic = 1;
#endif
SYSCTL_INT(_debug, OID_AUTO, debugger_on_panic, CTLFLAG_RW | CTLFLAG_TUN,
&debugger_on_panic, 0, "Run debugger on kernel panic");
SYSCTL_INT(_debug, OID_AUTO, debugger_on_panic,
CTLFLAG_RW | CTLFLAG_SECURE | CTLFLAG_TUN, &debugger_on_panic, 0,
"Run debugger on kernel panic");
TUNABLE_INT("debug.debugger_on_panic", &debugger_on_panic);
#ifdef KDB_TRACE
@ -111,8 +112,9 @@ static int trace_on_panic = 1;
#else
static int trace_on_panic = 0;
#endif
SYSCTL_INT(_debug, OID_AUTO, trace_on_panic, CTLFLAG_RW | CTLFLAG_TUN,
&trace_on_panic, 0, "Print stack trace on kernel panic");
SYSCTL_INT(_debug, OID_AUTO, trace_on_panic,
CTLFLAG_RW | CTLFLAG_SECURE | CTLFLAG_TUN, &trace_on_panic, 0,
"Print stack trace on kernel panic");
TUNABLE_INT("debug.trace_on_panic", &trace_on_panic);
#endif /* KDB */