summaryrefslogtreecommitdiff
path: root/share/man/man7
diff options
context:
space:
mode:
authorJason McIntyre <jmc@cvs.openbsd.org>2004-01-08 10:56:08 +0000
committerJason McIntyre <jmc@cvs.openbsd.org>2004-01-08 10:56:08 +0000
commitf15a6410c374a29de109fe1efcec650b34eb65a3 (patch)
tree58eef34a5e5d691c4f98afcca90657b8e59c7d2b /share/man/man7
parent6ca3ada111ee9e08d283220dfe2042250d5e1219 (diff)
document that sysctls fs.posix.setuid and net.inet.ip.sourceroute may not
be set when securelevel > 0; the latter from Ryan Leslie (PR 3631);
Diffstat (limited to 'share/man/man7')
-rw-r--r--share/man/man7/securelevel.712
1 files changed, 11 insertions, 1 deletions
diff --git a/share/man/man7/securelevel.7 b/share/man/man7/securelevel.7
index b24c62f145c..a560151d1c9 100644
--- a/share/man/man7/securelevel.7
+++ b/share/man/man7/securelevel.7
@@ -1,4 +1,4 @@
-.\" $OpenBSD: securelevel.7,v 1.14 2002/07/30 00:11:36 nordin Exp $
+.\" $OpenBSD: securelevel.7,v 1.15 2004/01/08 10:56:07 jmc Exp $
.\"
.\" Copyright (c) 2000 Hugh Graham
.\"
@@ -72,6 +72,16 @@ raw disk devices of mounted file systems are read-only
system immutable and append-only file flags may not be removed
.It
kernel modules may not be loaded or unloaded
+.It
+the
+.Va fs.posix.setuid
+.Xr sysctl 8
+variable may not be raised
+.It
+the
+.Va net.inet.ip.sourceroute
+.Xr sysctl 8
+variable may not be raised
.El
.It \ 2 Em Highly secure mode
.Bl -hyphen -compact