diff options
| author | elad <elad@NetBSD.org> | 2006-05-16 00:08:24 +0000 |
|---|---|---|
| committer | elad <elad@NetBSD.org> | 2006-05-16 00:08:24 +0000 |
| commit | 04d63f90b55afcd1c9642f244eaaf74e71647f7d (patch) | |
| tree | 404582cf945a5acbfb6a70e6dca376213b3af899 /sbin/sysctl/sysctl.8 | |
| parent | 175d40d2ca0ab5f440adb68810ca910acb774680 (diff) | |
Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen
W^X mappings.
Disabled by default.
First proposed in:
http://mail-index.netbsd.org/tech-security/2005/12/18/0000.html
More information in:
http://pax.grsecurity.net/docs/mprotect.txt
Read relevant parts of options(4) and sysctl(3) before using!
Lots of thanks to the PaX author and Matt Thomas.
Diffstat (limited to 'sbin/sysctl/sysctl.8')
| -rw-r--r-- | sbin/sysctl/sysctl.8 | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/sbin/sysctl/sysctl.8 b/sbin/sysctl/sysctl.8 index 9ab4525ea97..e122f263401 100644 --- a/sbin/sysctl/sysctl.8 +++ b/sbin/sysctl/sysctl.8 @@ -1,4 +1,4 @@ -.\" $NetBSD: sysctl.8,v 1.144 2006/03/06 00:51:48 christos Exp $ +.\" $NetBSD: sysctl.8,v 1.145 2006/05/16 00:08:24 elad Exp $ .\" .\" Copyright (c) 2004 The NetBSD Foundation, Inc. .\" All rights reserved. @@ -533,6 +533,8 @@ privilege can change the value. .It proc.\*[Lt]pid\*[Gt].stopexec int yes .It proc.\*[Lt]pid\*[Gt].stopfork int yes .It security.curtain integer yes +.It security.pax.mprotect.enabled integer yes +.It security.pax.mprotect.global_protection integer yes .It security.setid_core node not applicable .It security.setid_core.dump integer yes .It security.setid_core.group integer yes |
