freebsd-skq/sys/dev/kbd
David Malone fca9a10bc1 Add a a sysctl, hw.kbd.keymap_restrict_change, which acts a bit
like secure level but which restricts changes to the keymap. Its
values impose the following restrictions:

0: No restriction - this is the default.
1: Only root can change restricted keys (like boot, panic, ...)
2: Only root can change restricted keys and regular keys.
   Other users still can change accents and function keys.
3: Only root can change restricted keys, regular keys and accents.
4: Only root can change any of the keymap (restricted keys, regular
      keys, accents and function keys).

Unfortunately, the keyboard's accent map is cleared when a new keymap
is loaded, which makes the distinction between level 3 and level 4
less useful.

The MAC guys might like to make this a policy?

No objections from: -audit about 6 moths ago
2003-03-09 22:49:48 +00:00
..
atkbd.c Spelling. 2003-02-05 14:03:55 +00:00
atkbdc.c de-count atkbdc. I have more extensive patches to make properly dynamic, 2002-08-19 23:58:37 +00:00
atkbdcreg.h Include "opt_kbd.h" since certain structures size depend on the value 2002-10-15 21:35:01 +00:00
atkbdreg.h
kbd.c Add a a sysctl, hw.kbd.keymap_restrict_change, which acts a bit 2003-03-09 22:49:48 +00:00
kbdreg.h Fix typo; the meaning of the 3rd parameter to genkbd_keyaction() is 2001-07-20 14:49:54 +00:00
kbdtables.h