summaryrefslogtreecommitdiffstats
path: root/sbin/sysctl/sysctl.8 (follow)
Commit message (Collapse)AuthorAgeFilesLines
* simplify synopsis and text;jmc2018-02-161-17/+12
| | | | ok millert
* Adjust references for sysctl(3) to sysctl(2)deraadt2018-01-121-4/+4
|
* Merge headers defining identifiers from sysctl.8 into sysctl.3. Shorten andtb2017-05-041-39/+5
| | | | | | update their descriptions. In sysctl.8 refer to /etc/sysctl.conf in FILES. discussed with and ok jmc
* remove the list of available sysctls: the sysctls are fullyjmc2017-03-161-312/+6
| | | | | | | described in sysctl(3) and a list of available sysctls on any particular machine is best retrieved using sysctl; text tweaked by schwarze ok bluhm millert deraadt schwarze
* Introduce a new knob to force the first USB keyboard as console input.mpi2017-03-111-2/+5
| | | | | | | By setting "machdep.forceukbd=1" you can now use your USB keyboard in ddb(4) even if your BIOS emulates a pckbd(4). ok tom@, kettenis@, deraadt@
* Add machdep.lidaction to list of sysctls.natano2017-03-041-2/+3
| | | | | prodded by Stefan Wollny via tb ok tb jmc
* add kern.dnsjackport;jmc2016-10-151-2/+3
|
* document kern.allowkmem; ok deraadtjmc2016-09-281-2/+3
|
* kern.arandom no longer existsderaadt2016-09-231-3/+2
| | | | from rob pierce
* Remove usermount remnants. ok tedunatano2016-09-071-3/+2
|
* correct syntax for baddynamic example. from Holger Mikolontedu2016-07-271-3/+3
|
* Make the size for the syn cache hash array tunable. As we arebluhm2016-07-201-4/+6
| | | | | | | | swapping between two syn caches for random reseeding anyway, this feature can be added easily. When the cache is empty, there is an opportunity to change the hash size. This allows an admin under SYN flood attack to defend his machine. Suggested by claudio@; OK jung@ claudio@ jmc@
* Remove kern.random remnants; OK deraadt@tim2016-07-051-7/+2
|
* ntpys sysctl was removedtedu2016-06-301-4/+2
|
* Document arptimeout, arpdown. Prodded by and ok jmc@chris2016-06-291-2/+4
|
* Add net.inet.{tcp,udp}.rootonly sysctl, to mark which portsvgross2016-06-181-2/+4
| | | | | | cannot be bound to by non-root users. Ok millert@ bluhm@
* Document the net.inet.tcp.synuselimit sysctl; OK bluhm@ jmc@tim2016-06-071-2/+3
|
* Kill sysctl net.inet6.ip6.rr_prunejca2016-06-011-3/+2
| | | | | We don't support Router Renumbering and there are no plans to change that. ok mpi@
* wxabort bits; ok deraadtjmc2016-05-291-2/+3
|
* VOP_REALLOCBLKS() and related code is unused since the removal ofnatano2016-05-231-11/+2
| | | | | cluster_write(). ok beck zhuk
* Remove sysctl net.inet6.ip6.v6onlyjca2016-05-191-3/+2
| | | | | | | | This sysctl is a no-op, read-only since it was introduced. There are no plans to support IPv4-mapped addresses on OpenBSD, thus this sysctl is meaningless. Noticed by djm@, ok claudio@ mpi@ sthen@ henning@
* Don't use .Aq for syntax elements that require ASCII "<>".schwarze2016-03-311-20/+20
| | | | | Patch from Christian Heckendorf <mbie at ulmus dot me>. OK jmc@ bentley@
* Remove option USER_LDT and everything depending on it.naddy2016-03-031-3/+2
| | | | | | | | Remove machdep.userldt sysctl. Remove i386_[gs]et_ldt syscall stub from libi386. Remove i386_[gs]et_ldt regression test. ok mlarkin@ millert@ guenther@
* delete the kern.emul/KERN_EMUL sysctl bits since there are nonaddy2016-02-291-4/+2
| | | | emulations left; ok millert@ deraadt@, jmc@ (man pages)
* document the other two net.inet6.ip6.ifq variables, ok logan mikebsthen2015-11-051-1/+3
|
* Correct my mistake in the previous patch:logan2015-11-051-2/+2
| | | | | | net.inet6.ip6.ifq -> net.inet6.ip6.ifq.len Pointed out by Mike Belopuhov
* Add an entry for net.inet6.ip6.ifq that dlg@ committed a while ago.logan2015-11-051-2/+3
| | | | OK dlg@
* If we care about placing core files from SUID programs in a safe place,zhuk2015-10-031-4/+3
| | | | | | lets do not suggest to provoke races and use -m option of mkdir(1). ok guenther@, "don't care" deraadt@ :)
* put global_ptrace here too so users know how to spell it. poke by jmctedu2014-12-121-2/+3
|
* mention hw.perfpolicy; Daniel Jakotsderaadt2014-10-231-2/+3
|
* Nuke net.inet6.icmp6.rediraccept and allow redirects on interfacesflorian2014-08-271-3/+2
| | | | | | | with autoconf enabled. If one is doing SLAAC one does already trust link local icmp6 so the policy for icmp6 redirects should be the same. pointed out by & OK bluhm@; OK henning@
* Remove userland bits related to the crypto(4) interface; ok deraadtmikeb2014-08-201-5/+2
|
* net.inet6.ip6.accept_rtadv bit the buckethenning2014-07-111-2/+1
| | | | ok florian bluhm benno stsp
* Remove rfc 4620 Node Information Query support (from the kernel).benno2014-07-111-3/+2
| | | | ok henning@ stu@, Yay! weerd@
* Kill the {nd6_,}useloopback buttons, using the loopback interface formpi2014-05-071-3/+2
| | | | | | local traffic is not optional. ok mikeb@, stsp@, jca@
* tweak previous;jmc2014-05-041-3/+2
|
* When kern.nosuidcoredump=3, act like =2 but try to dump cores intoderaadt2014-05-041-2/+14
| | | | | | | | | | | | | | | | | | the /var/crash/programname/ directory, as root. For instance, # mkdir /var/crash/bgpd/ # chmod 700 /var/crash/bgpd/ # If you skip this step, you are a moron # sysctl kern.nosuidcoredump=3 # bgpd # pkill -ABRT bgpd # ls /var/crash/bgpd/ 14764.core 23207.core 6423.core Of course, in real life the idea is that you don't kill the daemon but it crashes and you collect parallel cores. Careful you don't fill your /var. Further tuneables are being considered. Sorry to be picking on bgpd for this example. I've watched the "too difficult to debug privsep code" angst for far too long. ok guenther
* sort the ip6 sysctls;jmc2014-04-271-6/+6
|
* Document net.inet6.ip6.dad_pending.logan2014-04-271-2/+3
| | | | | OK from jmc@, and thanks to sthen@ for pointing out my mistake in the first version of the diff.
* Add missing description for IPv6 mtudisctimeout sysctl andlogan2014-04-191-1/+2
| | | | | | rework the wording for both IPv4 and IPv6. OK from sthen@, henning@ and claudio@
* Add missing man page descriptions for the following IPv6 sysctls:logan2014-04-191-2/+6
| | | | | | | | | -maxdynroutes -maxifprefixes -maxifdefrouters -neighborgcthresh OK from sthen@, claudio@ and henning@
* kill kame version symbols and sysctlderaadt2013-10-281-3/+2
| | | | ports tree grep run by sthen
* some Bx/Ox conversion;jmc2013-08-141-3/+5
| | | | From: Jan Stary
* add fuse sysctls, from Sylvestre Gallontedu2013-06-091-2/+8
|
* Add new sysctl for pipex packet input/output queue length andyasuoka2013-06-081-2/+8
| | | | | | counters. ok guenther, feedback jmc
* Add mentions about net.mpls and net.inet.ip.ifq.yasuoka2013-06-021-2/+12
| | | | input from jmc claudio
* Remove CTL_USER hierarchy from sysctl()guenther2013-04-151-24/+4
| | | | | | (Use sysconf() or confstr() instead) ok miod@ millert@
* remove kern.rthreadstedu2013-04-061-3/+2
|
* tedu faith(4), suggested by todd@ some weeks ago after a submission bympi2013-03-141-3/+2
| | | | | | dhill. ok krw@, mikeb@, tedu@ (implicit)
* sysctl.3: remove some confusing text about NFS_NIOTHREADSjmc2013-01-031-16/+2
| | | | | | | | | sysctl.8: remove the vfs.nfs.iothreads example, since a) showing how to set a default value is not particularly helpful and b) EXAMPLES is bloated enough as it is; further, remove the text which points to other pages for further discussion, since those pages no longer provide relevant info diff started by an email from Jan Stary; blambert helped me prepare this diff