diff options
| author |   jmc <jmc@openbsd.org> | 2004-01-08 10:56:07 +0000 |
|---|---|---|
| committer | jmc <jmc@openbsd.org> | 2004-01-08 10:56:07 +0000 |
| commit | 67d12a8b9b9eac8d9894bb1342c43b46be8ced8b (patch) | |
| tree | c95dfe2e1b57e054a3affcf554c5d904b29f4e8e | |
| parent | sync with sysctl/drivers + 0K == -273.15C; report grange; ok henning (diff) | |
| download | wireguard-openbsd-67d12a8b9b9eac8d9894bb1342c43b46be8ced8b.tar.xz wireguard-openbsd-67d12a8b9b9eac8d9894bb1342c43b46be8ced8b.zip | |
document that sysctls fs.posix.setuid and net.inet.ip.sourceroute may not
be set when securelevel > 0;
the latter from Ryan Leslie (PR 3631);
| -rw-r--r-- | share/man/man7/securelevel.7 | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/share/man/man7/securelevel.7 b/share/man/man7/securelevel.7 index b24c62f145c..a560151d1c9 100644 --- a/share/man/man7/securelevel.7 +++ b/share/man/man7/securelevel.7 @@ -1,4 +1,4 @@ -.\" $OpenBSD: securelevel.7,v 1.14 2002/07/30 00:11:36 nordin Exp $ +.\" $OpenBSD: securelevel.7,v 1.15 2004/01/08 10:56:07 jmc Exp $ .\" .\" Copyright (c) 2000 Hugh Graham .\" @@ -72,6 +72,16 @@ raw disk devices of mounted file systems are read-only system immutable and append-only file flags may not be removed .It kernel modules may not be loaded or unloaded +.It +the +.Va fs.posix.setuid +.Xr sysctl 8 +variable may not be raised +.It +the +.Va net.inet.ip.sourceroute +.Xr sysctl 8 +variable may not be raised .El .It \ 2 Em Highly secure mode .Bl -hyphen -compact |