[BACK]Return to sysctl.7 CVS log [TXT][DIR] Up to [cvs.NetBSD.org] / src / share / man / man7

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/share/man/man7/sysctl.7 between version 1.136 and 1.137

version 1.136, 2018/12/05 18:16:51 version 1.137, 2018/12/05 21:15:20
Line 524  calls used by
Line 524  calls used by
 .Xr fstat 1  .Xr fstat 1
 and  and
 .Xr sockstat 1 .  .Xr sockstat 1 .
 If it is set to  If it is set to
 .Dv 0  .Dv 0
 access is not allowed.  access is not allowed.
 If it is set to  If it is set to
Line 532  If it is set to
Line 532  If it is set to
 then only processes that have opened  then only processes that have opened
 .Pa /dev/kmem  .Pa /dev/kmem
 can have access.  can have access.
 If it is set to  If it is set to
 .Dv 2  .Dv 2
 every process is allowed.  every process is allowed.
 Defaults to  Defaults to
 .Dv 0  .Dv 0
 for  for
 .Dv KASLR  .Dv KASLR
 kernels  kernels
Line 544  and
Line 544  and
 .Dv 1  .Dv 1
 otherwise.  otherwise.
 Allowing general access renders KASLR ineffective; allowing only kmem  Allowing general access renders KASLR ineffective; allowing only kmem
 accessing programs, weakens KASLR if those programs can be subverted  accessing programs weakens KASLR if those programs can be subverted
 to leak the addresses.  to leak the addresses.
 .It Li kern.dump_on_panic ( Dv KERN_DUMP_ON_PANIC )  .It Li kern.dump_on_panic ( Dv KERN_DUMP_ON_PANIC )
 Perform a crash dump on system  Perform a crash dump on system

Legend:
Removed from v.1.136  
changed lines
  Added in v.1.137

CVSweb <webmaster@jp.NetBSD.org>