[BACK]Return to sysctl.7 CVS log [TXT][DIR] Up to [cvs.NetBSD.org] / src / share / man / man7

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/share/man/man7/sysctl.7 between version 1.60 and 1.71

version 1.60, 2011/02/01 21:03:53 version 1.71, 2012/06/09 08:22:14
Line 29 
Line 29 
 .\"  .\"
 .\"     @(#)sysctl.3    8.4 (Berkeley) 5/9/95  .\"     @(#)sysctl.3    8.4 (Berkeley) 5/9/95
 .\"  .\"
 .Dd February 1, 2011  .Dd June 8, 2012
 .Dt SYSCTL 7  .Dt SYSCTL 7
 .Os  .Os
 .Sh NAME  .Sh NAME
Line 142  The highest valid file system type numbe
Line 142  The highest valid file system type numbe
 Returns configuration information about the file system type given as a fourth  Returns configuration information about the file system type given as a fourth
 level identifier.  level identifier.
 .It Li vfs.generic.usermount ( VFS_USERMOUNT )  .It Li vfs.generic.usermount ( VFS_USERMOUNT )
 Determines if non superuser mounts are allowed, default to no  Determines if non superuser mounts are allowed, defaults to
 .Dv 0 .  .Dv 0 .
 .It Li vfs.generic.magiclinks ( VFS_MAGICLINKS )  .It Li vfs.generic.magiclinks ( VFS_MAGICLINKS )
 Controls if expansion of variables is going to be performed on pathnames  Controls if expansion of variables is going to be performed on pathnames
Line 306  privilege may change the value.
Line 306  privilege may change the value.
 .It kern.logsigexit     integer yes  .It kern.logsigexit     integer yes
 .It kern.mapped_files   integer no  .It kern.mapped_files   integer no
 .It kern.maxfiles       integer yes  .It kern.maxfiles       integer yes
   .It kern.maxlwp integer yes
 .It kern.maxpartitions  integer no  .It kern.maxpartitions  integer no
 .It kern.maxphys        integer no  .It kern.maxphys        integer no
 .It kern.maxproc        integer yes  .It kern.maxproc        integer yes
Line 356  privilege may change the value.
Line 357  privilege may change the value.
 .It kern.timecounter    node    not applicable  .It kern.timecounter    node    not applicable
 .It kern.timex  struct  no  .It kern.timex  struct  no
 .It kern.tkstat node    not applicable  .It kern.tkstat node    not applicable
   .It kern.tty    node    not applicable
 .It kern.urandom        integer no  .It kern.urandom        integer no
 .It kern.usercrypto     integer yes  .It kern.usercrypto     integer yes
 .It kern.userasymcrypto integer yes  .It kern.userasymcrypto integer yes
Line 667  otherwise\ 0.
Line 669  otherwise\ 0.
 The maximum number of open files that may be open in the system.  The maximum number of open files that may be open in the system.
 .It Li kern.maxpartitions ( KERN_MAXPARTITIONS )  .It Li kern.maxpartitions ( KERN_MAXPARTITIONS )
 The maximum number of partitions allowed per disk.  The maximum number of partitions allowed per disk.
   .It Li kern.maxlwp
   The maximum number of Lightweight Processes (threads) the system allows
   per uid.
 .It Li kern.maxphys ( KERN_MAXPHYS )  .It Li kern.maxphys ( KERN_MAXPHYS )
 Maximum raw I/O transfer size.  Maximum raw I/O transfer size.
 .It Li kern.maxproc ( KERN_MAXPROC )  .It Li kern.maxproc ( KERN_MAXPROC )
Line 1048  The total number of output characters.
Line 1053  The total number of output characters.
 .It Li kern.tkstat.rawcc ( KERN_TKSTAT_RAWCC )  .It Li kern.tkstat.rawcc ( KERN_TKSTAT_RAWCC )
 The number of raw input characters.  The number of raw input characters.
 .El  .El
   .It Li kern.tty
   The third level names for the tty setup variables are detailed below.
   The changeable column shows whether a process
   with appropriate privilege may change the value.
   .Bl -column "kern.tty.qsize" "int" "Changeable" -offset indent
   .It Sy Third level name Type    Changeable
   .It kern.tty.qsize      int     yes
   .El
   .Pp
   The variables are as follows:
   .Bl -tag -width "123456"
   .It Li kern.tty.qsize
   Control/display the size of the default input and output queues selected
   during tty creation.
   Is converted to a power of two and its range is between
   .Dv 1024
   and
   .Dv 65536 .
   .El
   .It Li kern.uidinfo
   Resource usage for the current user.
   .Bl -column "kern.uidinfo.proccnt" "integer" "Changeable" -offset indent
   .It Sy Third level name Type    Changeable
   .It kern.uidinfo.proccnt        integer no
   .It kern.uidinfo.lwpcnt integer no
   .It kern.uidinfo.lockcnt        integer no
   .It kern.uidinfo.sbsize integer no
   .El
   .Bl -tag -width "123456"
   .It Li kern.uidinfo.proccnt
   Returns the number of active processes for the current user.
   .It Li kern.uidinfo.lwpcnt
   Returns the number of active threads for the current user; the first thread
   of each process is not counted.
   .It Li kern.uidinfo.lockcnt
   Number of locks held by the current user.
   .It Li kern.uidinfo.sbsize
   Number of bytes in socket buffers allocated to the current user.
   .El
 .It Li kern.urandom ( KERN_URND )  .It Li kern.urandom ( KERN_URND )
 Random integer value.  Random integer value.
 .It Li kern.usercrypto  .It Li kern.usercrypto
Line 1085  point, the file system type, and the num
Line 1129  point, the file system type, and the num
 .It Li kern.veriexec.strict  .It Li kern.veriexec.strict
 Controls the strict level of Veriexec.  Controls the strict level of Veriexec.
 See  See
 .Xr security 8  .Xr security 7
 for more information on each level's implications.  for more information on each level's implications.
 .It Li kern.veriexec.verbose  .It Li kern.veriexec.verbose
 Controls the verbosity level of Veriexec.  Controls the verbosity level of Veriexec.
Line 1164  The currently defined protocols and name
Line 1208  The currently defined protocols and name
 .It Sy Protocol name    Variable name   Type    Changeable  .It Sy Protocol name    Variable name   Type    Changeable
 .It arp down    integer yes  .It arp down    integer yes
 .It arp keep    integer yes  .It arp keep    integer yes
   .It arp log_movements   integer yes
   .It arp log_permanent_modify    integer yes
   .It arp log_wrong_iface integer yes
 .It arp prune   integer yes  .It arp prune   integer yes
 .It arp refresh integer yes  .It arp refresh integer yes
 .It carp        allow   integer yes  .It carp        allow   integer yes
Line 1235  The currently defined protocols and name
Line 1282  The currently defined protocols and name
 .It udp checksum        integer yes  .It udp checksum        integer yes
 .It udp do_loopback_cksum       integer yes  .It udp do_loopback_cksum       integer yes
 .It udp recvspace       integer yes  .It udp recvspace       integer yes
   .It udp rfc6056.selected        string  yes
   .It udp rfc6056.available       string  yes
 .It udp sendspace       integer yes  .It udp sendspace       integer yes
 .El  .El
 .Pp  .Pp
Line 1514  It has no effect unless tcp.abc.enable i
Line 1563  It has no effect unless tcp.abc.enable i
 If set to 1, UDP checksums are being computed.  If set to 1, UDP checksums are being computed.
 Received non-zero UDP checksums are always checked.  Received non-zero UDP checksums are always checked.
 Disabling UDP checksums is strongly discouraged.  Disabling UDP checksums is strongly discouraged.
 .It Li udp.sendspace  
 The default UDP send buffer size.  
 .It Li udp.recvspace  .It Li udp.recvspace
 The default UDP receive buffer size.  The default UDP receive buffer size.
   .It Li udp.rfc6056.available
   The available RFC 6056 port randomization algorithms.
   .It Li udp.rfc6056.selected
   The currently selected RFC 6056 port randomization algorithm.
   .It Li udp.sendspace
   The default UDP send buffer size.
 .El  .El
 .Pp  .Pp
 For variables net.*.ipsec, please refer to  For variables net.*.ipsec, please refer to
Line 1568  The currently defined protocols and name
Line 1621  The currently defined protocols and name
 .It ip6 v6only  integer yes  .It ip6 v6only  integer yes
 .It udp6        do_loopback_cksum       integer yes  .It udp6        do_loopback_cksum       integer yes
 .It udp6        recvspace       integer yes  .It udp6        recvspace       integer yes
   .It udp6        rfc6056.selected        string  yes
   .It udp6        rfc6056.available       string  yes
 .It udp6        sendspace       integer yes  .It udp6        sendspace       integer yes
 .El  .El
 .Pp  .Pp
Line 1775  ICMPv6 redirect.
Line 1830  ICMPv6 redirect.
 Perform UDP checksum on loopback.  Perform UDP checksum on loopback.
 .It Li udp6.recvspace  .It Li udp6.recvspace
 Default UDP receive buffer size.  Default UDP receive buffer size.
   .It Li udp6.rfc6056.available
   The available RFC 6056 port randomization algorithms for IPv6.
   .It Li udp6.rfc6056.selected
   The currently selected RFC 6056 port randomization algorithm for IPv6.
 .It Li udp6.sendspace  .It Li udp6.sendspace
 Default UDP send buffer size.  Default UDP send buffer size.
 .El  .El
Line 2198  Number of display lines.
Line 2257  Number of display lines.
 .It Li ddb.tabstops ( DDBCTL_TABSTOPS )  .It Li ddb.tabstops ( DDBCTL_TABSTOPS )
 Tab width.  Tab width.
 .It Li ddb.onpanic ( DDBCTL_ONPANIC )  .It Li ddb.onpanic ( DDBCTL_ONPANIC )
 If non-zero, DDB will be entered if the kernel panics.  If greater than zero, DDB will be entered if the kernel panics.
   A value of 1 causes the system to enter DDB on panic, while a value of 2
   causes the kernel to attempt to print out a stack trace before entering DDB.
   A value of 0 causes the kernel to attempt to print a stack trace, then
   reboot, while a value of \-1 means neither a stack trace will be printed
   nor DDB entered.
 .It Li ddb.fromconsole ( DDBCTL_FROMCONSOLE )  .It Li ddb.fromconsole ( DDBCTL_FROMCONSOLE )
 If not zero, DDB may be entered by sending a break on a serial  If not zero, DDB may be entered by sending a break on a serial
 console or by a special key sequence on a graphics console.  console or by a special key sequence on a graphics console.
Line 2268  Settings for PaX -- exploit mitigation f
Line 2332  Settings for PaX -- exploit mitigation f
 For more information on any of the PaX features, please see  For more information on any of the PaX features, please see
 .Xr paxctl 8  .Xr paxctl 8
 and  and
 .Xr security 8 .  .Xr security 7 .
 The available third and fourth level names are:  The available third and fourth level names are:
 .Bl -column "security.pax.segvguard.suspend_timeout" "integer" "Changeable" \  .Bl -column "security.pax.segvguard.suspend_timeout" "integer" "Changeable" \
 -offset 2n  -offset 2n
Line 2301  Specifies the default global policy for 
Line 2365  Specifies the default global policy for 
 explicit enable/disable flag.  explicit enable/disable flag.
 .Pp  .Pp
 When non-zero, all programs will get PaX ASLR, except those exempted with  When non-zero, all programs will get PaX ASLR, except those exempted with
 .Xr paxctl 8  .  .Xr paxctl 8 .
 Otherwise, all programs will not get PaX ASLR, except those specifically  Otherwise, all programs will not get PaX ASLR, except those specifically
 marked as such with  marked as such with
 .Xr paxctl 8 .  .Xr paxctl 8 .
Line 2324  explicit enable/disable flag.
Line 2388  explicit enable/disable flag.
 .Pp  .Pp
 When non-zero, all programs will get the PaX MPROTECT restrictions,  When non-zero, all programs will get the PaX MPROTECT restrictions,
 except those exempted with  except those exempted with
 .Xr paxctl 8  .  .Xr paxctl 8 .
 Otherwise, all programs will not get the PaX MPROTECT restrictions,  Otherwise, all programs will not get the PaX MPROTECT restrictions,
 except those specifically marked as such with  except those specifically marked as such with
 .Xr paxctl 8 .  .Xr paxctl 8 .
Line 2349  explicit enable/disable flag.
Line 2413  explicit enable/disable flag.
 .Pp  .Pp
 When non-zero, all programs will get the PaX Segvguard,  When non-zero, all programs will get the PaX Segvguard,
 except those exempted with  except those exempted with
 .Xr paxctl 8  .  .Xr paxctl 8 .
 Otherwise, no program will get the PaX Segvguard restrictions,  Otherwise, no program will get the PaX Segvguard restrictions,
 except those specifically marked as such with  except those specifically marked as such with
 .Xr paxctl 8 .  .Xr paxctl 8 .
Line 2371  Intended use is to store values under
Line 2435  Intended use is to store values under
 .Xr sysctl 3 ,  .Xr sysctl 3 ,
 .Xr ipsec 4 ,  .Xr ipsec 4 ,
 .Xr tcp 4 ,  .Xr tcp 4 ,
 .Xr security 8 ,  .Xr security 7 ,
 .Xr sysctl 8  .Xr sysctl 8
 .Sh HISTORY  .Sh HISTORY
 The  The

Legend:
Removed from v.1.60  
changed lines
  Added in v.1.71

CVSweb <webmaster@jp.NetBSD.org>