version 1.62, 2011/03/18 16:20:12 |
version 1.71, 2012/06/09 08:22:14 |
|
|
.\" |
.\" |
.\" @(#)sysctl.3 8.4 (Berkeley) 5/9/95 |
.\" @(#)sysctl.3 8.4 (Berkeley) 5/9/95 |
.\" |
.\" |
.Dd March 18, 2011 |
.Dd June 8, 2012 |
.Dt SYSCTL 7 |
.Dt SYSCTL 7 |
.Os |
.Os |
.Sh NAME |
.Sh NAME |
Line 142 The highest valid file system type numbe |
|
Line 142 The highest valid file system type numbe |
|
Returns configuration information about the file system type given as a fourth |
Returns configuration information about the file system type given as a fourth |
level identifier. |
level identifier. |
.It Li vfs.generic.usermount ( VFS_USERMOUNT ) |
.It Li vfs.generic.usermount ( VFS_USERMOUNT ) |
Determines if non superuser mounts are allowed, default to no |
Determines if non superuser mounts are allowed, defaults to |
.Dv 0 . |
.Dv 0 . |
.It Li vfs.generic.magiclinks ( VFS_MAGICLINKS ) |
.It Li vfs.generic.magiclinks ( VFS_MAGICLINKS ) |
Controls if expansion of variables is going to be performed on pathnames |
Controls if expansion of variables is going to be performed on pathnames |
Line 306 privilege may change the value. |
|
Line 306 privilege may change the value. |
|
.It kern.logsigexit integer yes |
.It kern.logsigexit integer yes |
.It kern.mapped_files integer no |
.It kern.mapped_files integer no |
.It kern.maxfiles integer yes |
.It kern.maxfiles integer yes |
|
.It kern.maxlwp integer yes |
.It kern.maxpartitions integer no |
.It kern.maxpartitions integer no |
.It kern.maxphys integer no |
.It kern.maxphys integer no |
.It kern.maxproc integer yes |
.It kern.maxproc integer yes |
Line 356 privilege may change the value. |
|
Line 357 privilege may change the value. |
|
.It kern.timecounter node not applicable |
.It kern.timecounter node not applicable |
.It kern.timex struct no |
.It kern.timex struct no |
.It kern.tkstat node not applicable |
.It kern.tkstat node not applicable |
|
.It kern.tty node not applicable |
.It kern.urandom integer no |
.It kern.urandom integer no |
.It kern.usercrypto integer yes |
.It kern.usercrypto integer yes |
.It kern.userasymcrypto integer yes |
.It kern.userasymcrypto integer yes |
|
|
The maximum number of open files that may be open in the system. |
The maximum number of open files that may be open in the system. |
.It Li kern.maxpartitions ( KERN_MAXPARTITIONS ) |
.It Li kern.maxpartitions ( KERN_MAXPARTITIONS ) |
The maximum number of partitions allowed per disk. |
The maximum number of partitions allowed per disk. |
|
.It Li kern.maxlwp |
|
The maximum number of Lightweight Processes (threads) the system allows |
|
per uid. |
.It Li kern.maxphys ( KERN_MAXPHYS ) |
.It Li kern.maxphys ( KERN_MAXPHYS ) |
Maximum raw I/O transfer size. |
Maximum raw I/O transfer size. |
.It Li kern.maxproc ( KERN_MAXPROC ) |
.It Li kern.maxproc ( KERN_MAXPROC ) |
Line 1048 The total number of output characters. |
|
Line 1053 The total number of output characters. |
|
.It Li kern.tkstat.rawcc ( KERN_TKSTAT_RAWCC ) |
.It Li kern.tkstat.rawcc ( KERN_TKSTAT_RAWCC ) |
The number of raw input characters. |
The number of raw input characters. |
.El |
.El |
|
.It Li kern.tty |
|
The third level names for the tty setup variables are detailed below. |
|
The changeable column shows whether a process |
|
with appropriate privilege may change the value. |
|
.Bl -column "kern.tty.qsize" "int" "Changeable" -offset indent |
|
.It Sy Third level name Type Changeable |
|
.It kern.tty.qsize int yes |
|
.El |
|
.Pp |
|
The variables are as follows: |
|
.Bl -tag -width "123456" |
|
.It Li kern.tty.qsize |
|
Control/display the size of the default input and output queues selected |
|
during tty creation. |
|
Is converted to a power of two and its range is between |
|
.Dv 1024 |
|
and |
|
.Dv 65536 . |
|
.El |
|
.It Li kern.uidinfo |
|
Resource usage for the current user. |
|
.Bl -column "kern.uidinfo.proccnt" "integer" "Changeable" -offset indent |
|
.It Sy Third level name Type Changeable |
|
.It kern.uidinfo.proccnt integer no |
|
.It kern.uidinfo.lwpcnt integer no |
|
.It kern.uidinfo.lockcnt integer no |
|
.It kern.uidinfo.sbsize integer no |
|
.El |
|
.Bl -tag -width "123456" |
|
.It Li kern.uidinfo.proccnt |
|
Returns the number of active processes for the current user. |
|
.It Li kern.uidinfo.lwpcnt |
|
Returns the number of active threads for the current user; the first thread |
|
of each process is not counted. |
|
.It Li kern.uidinfo.lockcnt |
|
Number of locks held by the current user. |
|
.It Li kern.uidinfo.sbsize |
|
Number of bytes in socket buffers allocated to the current user. |
|
.El |
.It Li kern.urandom ( KERN_URND ) |
.It Li kern.urandom ( KERN_URND ) |
Random integer value. |
Random integer value. |
.It Li kern.usercrypto |
.It Li kern.usercrypto |
Line 1164 The currently defined protocols and name |
|
Line 1208 The currently defined protocols and name |
|
.It Sy Protocol name Variable name Type Changeable |
.It Sy Protocol name Variable name Type Changeable |
.It arp down integer yes |
.It arp down integer yes |
.It arp keep integer yes |
.It arp keep integer yes |
|
.It arp log_movements integer yes |
|
.It arp log_permanent_modify integer yes |
|
.It arp log_wrong_iface integer yes |
.It arp prune integer yes |
.It arp prune integer yes |
.It arp refresh integer yes |
.It arp refresh integer yes |
.It carp allow integer yes |
.It carp allow integer yes |
Line 1235 The currently defined protocols and name |
|
Line 1282 The currently defined protocols and name |
|
.It udp checksum integer yes |
.It udp checksum integer yes |
.It udp do_loopback_cksum integer yes |
.It udp do_loopback_cksum integer yes |
.It udp recvspace integer yes |
.It udp recvspace integer yes |
|
.It udp rfc6056.selected string yes |
|
.It udp rfc6056.available string yes |
.It udp sendspace integer yes |
.It udp sendspace integer yes |
.El |
.El |
.Pp |
.Pp |
Line 1514 It has no effect unless tcp.abc.enable i |
|
Line 1563 It has no effect unless tcp.abc.enable i |
|
If set to 1, UDP checksums are being computed. |
If set to 1, UDP checksums are being computed. |
Received non-zero UDP checksums are always checked. |
Received non-zero UDP checksums are always checked. |
Disabling UDP checksums is strongly discouraged. |
Disabling UDP checksums is strongly discouraged. |
.It Li udp.sendspace |
|
The default UDP send buffer size. |
|
.It Li udp.recvspace |
.It Li udp.recvspace |
The default UDP receive buffer size. |
The default UDP receive buffer size. |
|
.It Li udp.rfc6056.available |
|
The available RFC 6056 port randomization algorithms. |
|
.It Li udp.rfc6056.selected |
|
The currently selected RFC 6056 port randomization algorithm. |
|
.It Li udp.sendspace |
|
The default UDP send buffer size. |
.El |
.El |
.Pp |
.Pp |
For variables net.*.ipsec, please refer to |
For variables net.*.ipsec, please refer to |
Line 1568 The currently defined protocols and name |
|
Line 1621 The currently defined protocols and name |
|
.It ip6 v6only integer yes |
.It ip6 v6only integer yes |
.It udp6 do_loopback_cksum integer yes |
.It udp6 do_loopback_cksum integer yes |
.It udp6 recvspace integer yes |
.It udp6 recvspace integer yes |
|
.It udp6 rfc6056.selected string yes |
|
.It udp6 rfc6056.available string yes |
.It udp6 sendspace integer yes |
.It udp6 sendspace integer yes |
.El |
.El |
.Pp |
.Pp |
Line 1775 ICMPv6 redirect. |
|
Line 1830 ICMPv6 redirect. |
|
Perform UDP checksum on loopback. |
Perform UDP checksum on loopback. |
.It Li udp6.recvspace |
.It Li udp6.recvspace |
Default UDP receive buffer size. |
Default UDP receive buffer size. |
|
.It Li udp6.rfc6056.available |
|
The available RFC 6056 port randomization algorithms for IPv6. |
|
.It Li udp6.rfc6056.selected |
|
The currently selected RFC 6056 port randomization algorithm for IPv6. |
.It Li udp6.sendspace |
.It Li udp6.sendspace |
Default UDP send buffer size. |
Default UDP send buffer size. |
.El |
.El |
Line 2198 Number of display lines. |
|
Line 2257 Number of display lines. |
|
.It Li ddb.tabstops ( DDBCTL_TABSTOPS ) |
.It Li ddb.tabstops ( DDBCTL_TABSTOPS ) |
Tab width. |
Tab width. |
.It Li ddb.onpanic ( DDBCTL_ONPANIC ) |
.It Li ddb.onpanic ( DDBCTL_ONPANIC ) |
If non-zero, DDB will be entered if the kernel panics. |
If greater than zero, DDB will be entered if the kernel panics. |
|
A value of 1 causes the system to enter DDB on panic, while a value of 2 |
|
causes the kernel to attempt to print out a stack trace before entering DDB. |
|
A value of 0 causes the kernel to attempt to print a stack trace, then |
|
reboot, while a value of \-1 means neither a stack trace will be printed |
|
nor DDB entered. |
.It Li ddb.fromconsole ( DDBCTL_FROMCONSOLE ) |
.It Li ddb.fromconsole ( DDBCTL_FROMCONSOLE ) |
If not zero, DDB may be entered by sending a break on a serial |
If not zero, DDB may be entered by sending a break on a serial |
console or by a special key sequence on a graphics console. |
console or by a special key sequence on a graphics console. |
Line 2301 Specifies the default global policy for |
|
Line 2365 Specifies the default global policy for |
|
explicit enable/disable flag. |
explicit enable/disable flag. |
.Pp |
.Pp |
When non-zero, all programs will get PaX ASLR, except those exempted with |
When non-zero, all programs will get PaX ASLR, except those exempted with |
.Xr paxctl 8 . |
.Xr paxctl 8 . |
Otherwise, all programs will not get PaX ASLR, except those specifically |
Otherwise, all programs will not get PaX ASLR, except those specifically |
marked as such with |
marked as such with |
.Xr paxctl 8 . |
.Xr paxctl 8 . |
Line 2324 explicit enable/disable flag. |
|
Line 2388 explicit enable/disable flag. |
|
.Pp |
.Pp |
When non-zero, all programs will get the PaX MPROTECT restrictions, |
When non-zero, all programs will get the PaX MPROTECT restrictions, |
except those exempted with |
except those exempted with |
.Xr paxctl 8 . |
.Xr paxctl 8 . |
Otherwise, all programs will not get the PaX MPROTECT restrictions, |
Otherwise, all programs will not get the PaX MPROTECT restrictions, |
except those specifically marked as such with |
except those specifically marked as such with |
.Xr paxctl 8 . |
.Xr paxctl 8 . |
Line 2349 explicit enable/disable flag. |
|
Line 2413 explicit enable/disable flag. |
|
.Pp |
.Pp |
When non-zero, all programs will get the PaX Segvguard, |
When non-zero, all programs will get the PaX Segvguard, |
except those exempted with |
except those exempted with |
.Xr paxctl 8 . |
.Xr paxctl 8 . |
Otherwise, no program will get the PaX Segvguard restrictions, |
Otherwise, no program will get the PaX Segvguard restrictions, |
except those specifically marked as such with |
except those specifically marked as such with |
.Xr paxctl 8 . |
.Xr paxctl 8 . |