[BACK]Return to sysctl.7 CVS log [TXT][DIR] Up to [cvs.NetBSD.org] / src / share / man / man7

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/share/man/man7/sysctl.7 between version 1.57 and 1.71

version 1.57, 2011/01/19 08:34:19 version 1.71, 2012/06/09 08:22:14
Line 29 
Line 29 
 .\"  .\"
 .\"     @(#)sysctl.3    8.4 (Berkeley) 5/9/95  .\"     @(#)sysctl.3    8.4 (Berkeley) 5/9/95
 .\"  .\"
 .Dd January 19, 2011  .Dd June 8, 2012
 .Dt SYSCTL 7  .Dt SYSCTL 7
 .Os  .Os
 .Sh NAME  .Sh NAME
Line 141  The highest valid file system type numbe
Line 141  The highest valid file system type numbe
 .It Li vfs.generic.conf ( VFS_CONF )  .It Li vfs.generic.conf ( VFS_CONF )
 Returns configuration information about the file system type given as a fourth  Returns configuration information about the file system type given as a fourth
 level identifier.  level identifier.
   .It Li vfs.generic.usermount ( VFS_USERMOUNT )
   Determines if non superuser mounts are allowed, defaults to
   .Dv 0 .
   .It Li vfs.generic.magiclinks ( VFS_MAGICLINKS )
   Controls if expansion of variables is going to be performed on pathnames
   or not.
   Defaults to no variable expansion,
   .Dv 0 .
   Variables are of the form
   .Li @name
   and the variables supported are described in
   .Xr symlink 7
   under
   .Dq "MAGIC SYMLINKS" .
 .El  .El
 .Pp  .Pp
 A second level name for controlling the  A second level name for controlling the
Line 292  privilege may change the value.
Line 306  privilege may change the value.
 .It kern.logsigexit     integer yes  .It kern.logsigexit     integer yes
 .It kern.mapped_files   integer no  .It kern.mapped_files   integer no
 .It kern.maxfiles       integer yes  .It kern.maxfiles       integer yes
   .It kern.maxlwp integer yes
 .It kern.maxpartitions  integer no  .It kern.maxpartitions  integer no
 .It kern.maxphys        integer no  .It kern.maxphys        integer no
 .It kern.maxproc        integer yes  .It kern.maxproc        integer yes
Line 342  privilege may change the value.
Line 357  privilege may change the value.
 .It kern.timecounter    node    not applicable  .It kern.timecounter    node    not applicable
 .It kern.timex  struct  no  .It kern.timex  struct  no
 .It kern.tkstat node    not applicable  .It kern.tkstat node    not applicable
   .It kern.tty    node    not applicable
 .It kern.urandom        integer no  .It kern.urandom        integer no
 .It kern.usercrypto     integer yes  .It kern.usercrypto     integer yes
 .It kern.userasymcrypto integer yes  .It kern.userasymcrypto integer yes
Line 509  Maximum is 20 seconds.
Line 525  Maximum is 20 seconds.
 .It Li kern.fscale ( KERN_FSCALE )  .It Li kern.fscale ( KERN_FSCALE )
 The kernel fixed-point scale factor.  The kernel fixed-point scale factor.
 .It Li kern.fsync ( KERN_FSYNC )  .It Li kern.fsync ( KERN_FSYNC )
 Return 1 if the POSIX 1003.1b File Synchronization Option is available  Return 1 if the
   .St -p1003.1b-93
   File Synchronization Option is available
 on this system,  on this system,
 otherwise\ 0.  otherwise\ 0.
 .It Li kern.hardclock_ticks ( KERN_HARDCLOCK_TICKS )  .It Li kern.hardclock_ticks ( KERN_HARDCLOCK_TICKS )
Line 643  all process exits due to signals which c
Line 661  all process exits due to signals which c
 .Xr core 5  .Xr core 5
 file, and whether the coredump was created.  file, and whether the coredump was created.
 .It Li kern.mapped_files ( KERN_MAPPED_FILES )  .It Li kern.mapped_files ( KERN_MAPPED_FILES )
 Returns 1 if the POSIX 1003.1b Memory Mapped Files Option is available  Returns 1 if the
 on this system,  .St -p1003.1b-93
   Memory Mapped Files Option is available on this system,
 otherwise\ 0.  otherwise\ 0.
 .It Li kern.maxfiles ( KERN_MAXFILES )  .It Li kern.maxfiles ( KERN_MAXFILES )
 The maximum number of open files that may be open in the system.  The maximum number of open files that may be open in the system.
 .It Li kern.maxpartitions ( KERN_MAXPARTITIONS )  .It Li kern.maxpartitions ( KERN_MAXPARTITIONS )
 The maximum number of partitions allowed per disk.  The maximum number of partitions allowed per disk.
   .It Li kern.maxlwp
   The maximum number of Lightweight Processes (threads) the system allows
   per uid.
 .It Li kern.maxphys ( KERN_MAXPHYS )  .It Li kern.maxphys ( KERN_MAXPHYS )
 Maximum raw I/O transfer size.  Maximum raw I/O transfer size.
 .It Li kern.maxproc ( KERN_MAXPROC )  .It Li kern.maxproc ( KERN_MAXPROC )
Line 697  The variable can only be increased, and 
Line 719  The variable can only be increased, and 
 direct-mapped pool pages.  direct-mapped pool pages.
 .El  .El
 .It Li kern.memlock ( KERN_MEMLOCK )  .It Li kern.memlock ( KERN_MEMLOCK )
 Returns 1 if the POSIX 1003.1b Process Memory Locking Option is available  Returns 1 if the
 on this system,  .St -p1003.1b-93
   Process Memory Locking Option is available on this system,
 otherwise\ 0.  otherwise\ 0.
 .It Li kern.memlock_range ( KERN_MEMLOCK_RANGE )  .It Li kern.memlock_range ( KERN_MEMLOCK_RANGE )
 Returns 1 if the POSIX 1003.1b Range Memory Locking Option is available  Returns 1 if the
 on this system,  .St -p1003.1b-93
   Range Memory Locking Option is available on this system,
 otherwise\ 0.  otherwise\ 0.
 .It Li kern.memory_protection ( KERN_MEMORY_PROTECTION )  .It Li kern.memory_protection ( KERN_MEMORY_PROTECTION )
 Returns 1 if the POSIX 1003.1b Memory Protection Option is available  Returns 1 if the
 on this system,  .St -p1003.1b-93
   Memory Protection Option is available on this system,
 otherwise\ 0.  otherwise\ 0.
 .It Li kern.module  .It Li kern.module
 Settings related to kernel modules.  Settings related to kernel modules.
Line 729  A boolean that enables or disables verbo
Line 754  A boolean that enables or disables verbo
 debug messages related to kernel modules.  debug messages related to kernel modules.
 .El  .El
 .It Li kern.monotonic_clock ( KERN_MONOTONIC_CLOCK )  .It Li kern.monotonic_clock ( KERN_MONOTONIC_CLOCK )
 Returns the standard version the implementation of the POSIX 1003.1b  Returns the standard version the implementation of the
   .St -p1003.1b-93
 Monotonic Clock Option conforms to,  Monotonic Clock Option conforms to,
 otherwise\ 0.  otherwise\ 0.
 .It Li kern.mqueue  .It Li kern.mqueue
Line 821  pipes.
Line 847  pipes.
 .\" XXX: Undocumented .It Li kern.posix ( ? )  .\" XXX: Undocumented .It Li kern.posix ( ? )
 .\"      This is a node in which the only variable is semmax.  .\"      This is a node in which the only variable is semmax.
 .It Li kern.posix1version ( KERN_POSIX1 )  .It Li kern.posix1version ( KERN_POSIX1 )
 The version of ISO/IEC 9945 (POSIX 1003.1) with which the system  The version of ISO/IEC 9945
 attempts to comply.  .Pq St -p1003.1
   with which the system attempts to comply.
 .It Li kern.posix_aio  .It Li kern.posix_aio
 The version of  The version of
 .St -p1003.1  .St -p1003.1
Line 977  See
Line 1004  See
 Maximum amount of kernel memory to be used for socket buffers.  Maximum amount of kernel memory to be used for socket buffers.
 .\" XXX units?  .\" XXX units?
 .It Li kern.synchronized_io ( KERN_SYNCHRONIZED_IO )  .It Li kern.synchronized_io ( KERN_SYNCHRONIZED_IO )
 Returns 1 if the POSIX 1003.1b Synchronized I/O Option is available  Returns 1 if the
 on this system,  .St -p1003.1b-93
   Synchronized I/O Option is available on this system,
 otherwise\ 0.  otherwise\ 0.
 .It Li kern.timecounter ( dynamic )  .It Li kern.timecounter ( dynamic )
 Display and control the timecounter source of the system.  Display and control the timecounter source of the system.
Line 1025  The total number of output characters.
Line 1053  The total number of output characters.
 .It Li kern.tkstat.rawcc ( KERN_TKSTAT_RAWCC )  .It Li kern.tkstat.rawcc ( KERN_TKSTAT_RAWCC )
 The number of raw input characters.  The number of raw input characters.
 .El  .El
   .It Li kern.tty
   The third level names for the tty setup variables are detailed below.
   The changeable column shows whether a process
   with appropriate privilege may change the value.
   .Bl -column "kern.tty.qsize" "int" "Changeable" -offset indent
   .It Sy Third level name Type    Changeable
   .It kern.tty.qsize      int     yes
   .El
   .Pp
   The variables are as follows:
   .Bl -tag -width "123456"
   .It Li kern.tty.qsize
   Control/display the size of the default input and output queues selected
   during tty creation.
   Is converted to a power of two and its range is between
   .Dv 1024
   and
   .Dv 65536 .
   .El
   .It Li kern.uidinfo
   Resource usage for the current user.
   .Bl -column "kern.uidinfo.proccnt" "integer" "Changeable" -offset indent
   .It Sy Third level name Type    Changeable
   .It kern.uidinfo.proccnt        integer no
   .It kern.uidinfo.lwpcnt integer no
   .It kern.uidinfo.lockcnt        integer no
   .It kern.uidinfo.sbsize integer no
   .El
   .Bl -tag -width "123456"
   .It Li kern.uidinfo.proccnt
   Returns the number of active processes for the current user.
   .It Li kern.uidinfo.lwpcnt
   Returns the number of active threads for the current user; the first thread
   of each process is not counted.
   .It Li kern.uidinfo.lockcnt
   Number of locks held by the current user.
   .It Li kern.uidinfo.sbsize
   Number of bytes in socket buffers allocated to the current user.
   .El
 .It Li kern.urandom ( KERN_URND )  .It Li kern.urandom ( KERN_URND )
 Random integer value.  Random integer value.
 .It Li kern.usercrypto  .It Li kern.usercrypto
Line 1062  point, the file system type, and the num
Line 1129  point, the file system type, and the num
 .It Li kern.veriexec.strict  .It Li kern.veriexec.strict
 Controls the strict level of Veriexec.  Controls the strict level of Veriexec.
 See  See
 .Xr security 8  .Xr security 7
 for more information on each level's implications.  for more information on each level's implications.
 .It Li kern.veriexec.verbose  .It Li kern.veriexec.verbose
 Controls the verbosity level of Veriexec.  Controls the verbosity level of Veriexec.
Line 1141  The currently defined protocols and name
Line 1208  The currently defined protocols and name
 .It Sy Protocol name    Variable name   Type    Changeable  .It Sy Protocol name    Variable name   Type    Changeable
 .It arp down    integer yes  .It arp down    integer yes
 .It arp keep    integer yes  .It arp keep    integer yes
   .It arp log_movements   integer yes
   .It arp log_permanent_modify    integer yes
   .It arp log_wrong_iface integer yes
 .It arp prune   integer yes  .It arp prune   integer yes
 .It arp refresh integer yes  .It arp refresh integer yes
 .It carp        allow   integer yes  .It carp        allow   integer yes
Line 1212  The currently defined protocols and name
Line 1282  The currently defined protocols and name
 .It udp checksum        integer yes  .It udp checksum        integer yes
 .It udp do_loopback_cksum       integer yes  .It udp do_loopback_cksum       integer yes
 .It udp recvspace       integer yes  .It udp recvspace       integer yes
   .It udp rfc6056.selected        string  yes
   .It udp rfc6056.available       string  yes
 .It udp sendspace       integer yes  .It udp sendspace       integer yes
 .El  .El
 .Pp  .Pp
Line 1491  It has no effect unless tcp.abc.enable i
Line 1563  It has no effect unless tcp.abc.enable i
 If set to 1, UDP checksums are being computed.  If set to 1, UDP checksums are being computed.
 Received non-zero UDP checksums are always checked.  Received non-zero UDP checksums are always checked.
 Disabling UDP checksums is strongly discouraged.  Disabling UDP checksums is strongly discouraged.
 .It Li udp.sendspace  
 The default UDP send buffer size.  
 .It Li udp.recvspace  .It Li udp.recvspace
 The default UDP receive buffer size.  The default UDP receive buffer size.
   .It Li udp.rfc6056.available
   The available RFC 6056 port randomization algorithms.
   .It Li udp.rfc6056.selected
   The currently selected RFC 6056 port randomization algorithm.
   .It Li udp.sendspace
   The default UDP send buffer size.
 .El  .El
 .Pp  .Pp
 For variables net.*.ipsec, please refer to  For variables net.*.ipsec, please refer to
Line 1545  The currently defined protocols and name
Line 1621  The currently defined protocols and name
 .It ip6 v6only  integer yes  .It ip6 v6only  integer yes
 .It udp6        do_loopback_cksum       integer yes  .It udp6        do_loopback_cksum       integer yes
 .It udp6        recvspace       integer yes  .It udp6        recvspace       integer yes
   .It udp6        rfc6056.selected        string  yes
   .It udp6        rfc6056.available       string  yes
 .It udp6        sendspace       integer yes  .It udp6        sendspace       integer yes
 .El  .El
 .Pp  .Pp
Line 1752  ICMPv6 redirect.
Line 1830  ICMPv6 redirect.
 Perform UDP checksum on loopback.  Perform UDP checksum on loopback.
 .It Li udp6.recvspace  .It Li udp6.recvspace
 Default UDP receive buffer size.  Default UDP receive buffer size.
   .It Li udp6.rfc6056.available
   The available RFC 6056 port randomization algorithms for IPv6.
   .It Li udp6.rfc6056.selected
   The currently selected RFC 6056 port randomization algorithm for IPv6.
 .It Li udp6.sendspace  .It Li udp6.sendspace
 Default UDP send buffer size.  Default UDP send buffer size.
 .El  .El
Line 2025  The maximum length in bytes of a text-pr
Line 2107  The maximum length in bytes of a text-pr
 line.  line.
 .It Li user.posix2_char_term ( USER_POSIX2_CHAR_TERM )  .It Li user.posix2_char_term ( USER_POSIX2_CHAR_TERM )
 Return 1 if the system supports at least one terminal type capable of  Return 1 if the system supports at least one terminal type capable of
 all operations described in POSIX 1003.2, otherwise\ 0.  all operations described in
   .St -p1003.2 ,
   otherwise\ 0.
 .It Li user.posix2_c_bind ( USER_POSIX2_C_BIND )  .It Li user.posix2_c_bind ( USER_POSIX2_C_BIND )
 Return 1 if the system's C-language development facilities support the  Return 1 if the system's C-language development facilities support the
 C-Language Bindings Option, otherwise\ 0.  C-Language Bindings Option, otherwise\ 0.
Line 2047  otherwise\ 0.
Line 2131  otherwise\ 0.
 Return 1 if the system supports the User Portability Utilities Option,  Return 1 if the system supports the User Portability Utilities Option,
 otherwise\ 0.  otherwise\ 0.
 .It Li user.posix2_version ( USER_POSIX2_VERSION )  .It Li user.posix2_version ( USER_POSIX2_VERSION )
 The version of POSIX 1003.2 with which the system attempts to comply.  The version of
   .St -p1003.2
   with which the system attempts to comply.
 .It Li user.re_dup_max ( USER_RE_DUP_MAX )  .It Li user.re_dup_max ( USER_RE_DUP_MAX )
 The maximum number of repeated occurrences of a regular expression  The maximum number of repeated occurrences of a regular expression
 permitted when using interval notation.  permitted when using interval notation.
Line 2171  Number of display lines.
Line 2257  Number of display lines.
 .It Li ddb.tabstops ( DDBCTL_TABSTOPS )  .It Li ddb.tabstops ( DDBCTL_TABSTOPS )
 Tab width.  Tab width.
 .It Li ddb.onpanic ( DDBCTL_ONPANIC )  .It Li ddb.onpanic ( DDBCTL_ONPANIC )
 If non-zero, DDB will be entered if the kernel panics.  If greater than zero, DDB will be entered if the kernel panics.
   A value of 1 causes the system to enter DDB on panic, while a value of 2
   causes the kernel to attempt to print out a stack trace before entering DDB.
   A value of 0 causes the kernel to attempt to print a stack trace, then
   reboot, while a value of \-1 means neither a stack trace will be printed
   nor DDB entered.
 .It Li ddb.fromconsole ( DDBCTL_FROMCONSOLE )  .It Li ddb.fromconsole ( DDBCTL_FROMCONSOLE )
 If not zero, DDB may be entered by sending a break on a serial  If not zero, DDB may be entered by sending a break on a serial
 console or by a special key sequence on a graphics console.  console or by a special key sequence on a graphics console.
Line 2241  Settings for PaX -- exploit mitigation f
Line 2332  Settings for PaX -- exploit mitigation f
 For more information on any of the PaX features, please see  For more information on any of the PaX features, please see
 .Xr paxctl 8  .Xr paxctl 8
 and  and
 .Xr security 8 .  .Xr security 7 .
 The available third and fourth level names are:  The available third and fourth level names are:
 .Bl -column "security.pax.segvguard.suspend_timeout" "integer" "Changeable" \  .Bl -column "security.pax.segvguard.suspend_timeout" "integer" "Changeable" \
 -offset 2n  -offset 2n
Line 2274  Specifies the default global policy for 
Line 2365  Specifies the default global policy for 
 explicit enable/disable flag.  explicit enable/disable flag.
 .Pp  .Pp
 When non-zero, all programs will get PaX ASLR, except those exempted with  When non-zero, all programs will get PaX ASLR, except those exempted with
 .Xr paxctl 8  .  .Xr paxctl 8 .
 Otherwise, all programs will not get PaX ASLR, except those specifically  Otherwise, all programs will not get PaX ASLR, except those specifically
 marked as such with  marked as such with
 .Xr paxctl 8 .  .Xr paxctl 8 .
Line 2297  explicit enable/disable flag.
Line 2388  explicit enable/disable flag.
 .Pp  .Pp
 When non-zero, all programs will get the PaX MPROTECT restrictions,  When non-zero, all programs will get the PaX MPROTECT restrictions,
 except those exempted with  except those exempted with
 .Xr paxctl 8  .  .Xr paxctl 8 .
 Otherwise, all programs will not get the PaX MPROTECT restrictions,  Otherwise, all programs will not get the PaX MPROTECT restrictions,
 except those specifically marked as such with  except those specifically marked as such with
 .Xr paxctl 8 .  .Xr paxctl 8 .
Line 2322  explicit enable/disable flag.
Line 2413  explicit enable/disable flag.
 .Pp  .Pp
 When non-zero, all programs will get the PaX Segvguard,  When non-zero, all programs will get the PaX Segvguard,
 except those exempted with  except those exempted with
 .Xr paxctl 8  .  .Xr paxctl 8 .
 Otherwise, no program will get the PaX Segvguard restrictions,  Otherwise, no program will get the PaX Segvguard restrictions,
 except those specifically marked as such with  except those specifically marked as such with
 .Xr paxctl 8 .  .Xr paxctl 8 .
Line 2344  Intended use is to store values under
Line 2435  Intended use is to store values under
 .Xr sysctl 3 ,  .Xr sysctl 3 ,
 .Xr ipsec 4 ,  .Xr ipsec 4 ,
 .Xr tcp 4 ,  .Xr tcp 4 ,
 .Xr security 8 ,  .Xr security 7 ,
 .Xr sysctl 8  .Xr sysctl 8
 .Sh HISTORY  .Sh HISTORY
 The  The

Legend:
Removed from v.1.57  
changed lines
  Added in v.1.71

CVSweb <webmaster@jp.NetBSD.org>