summaryrefslogtreecommitdiff
path: root/sbin/sysctl/sysctl.8
diff options
context:
space:
mode:
authorelad <elad@NetBSD.org>2006-05-16 00:08:24 +0000
committerelad <elad@NetBSD.org>2006-05-16 00:08:24 +0000
commit04d63f90b55afcd1c9642f244eaaf74e71647f7d (patch)
tree404582cf945a5acbfb6a70e6dca376213b3af899 /sbin/sysctl/sysctl.8
parent175d40d2ca0ab5f440adb68810ca910acb774680 (diff)
Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen
W^X mappings. Disabled by default. First proposed in: http://mail-index.netbsd.org/tech-security/2005/12/18/0000.html More information in: http://pax.grsecurity.net/docs/mprotect.txt Read relevant parts of options(4) and sysctl(3) before using! Lots of thanks to the PaX author and Matt Thomas.
Diffstat (limited to 'sbin/sysctl/sysctl.8')
-rw-r--r--sbin/sysctl/sysctl.84
1 files changed, 3 insertions, 1 deletions
diff --git a/sbin/sysctl/sysctl.8 b/sbin/sysctl/sysctl.8
index 9ab4525ea97..e122f263401 100644
--- a/sbin/sysctl/sysctl.8
+++ b/sbin/sysctl/sysctl.8
@@ -1,4 +1,4 @@
-.\" $NetBSD: sysctl.8,v 1.144 2006/03/06 00:51:48 christos Exp $
+.\" $NetBSD: sysctl.8,v 1.145 2006/05/16 00:08:24 elad Exp $
.\"
.\" Copyright (c) 2004 The NetBSD Foundation, Inc.
.\" All rights reserved.
@@ -533,6 +533,8 @@ privilege can change the value.
.It proc.\*[Lt]pid\*[Gt].stopexec int yes
.It proc.\*[Lt]pid\*[Gt].stopfork int yes
.It security.curtain integer yes
+.It security.pax.mprotect.enabled integer yes
+.It security.pax.mprotect.global_protection integer yes
.It security.setid_core node not applicable
.It security.setid_core.dump integer yes
.It security.setid_core.group integer yes