diff options
| author | Miod Vallat <miod@cvs.openbsd.org> | 2002-03-14 00:42:26 +0000 |
|---|---|---|
| committer | Miod Vallat <miod@cvs.openbsd.org> | 2002-03-14 00:42:26 +0000 |
| commit | 4e75a2f3d47fcb4101ad6c63743e4262538a944a (patch) | |
| tree | 8b4782ea02392ac0303642f999b3a00a9de95490 /sys/conf/GENERIC | |
| parent | 31d9f37c33069ba39395849737d1ef3662a4c687 (diff) | |
Turn the ptrace(2) syscall into a kernel compile option, option PTRACE in
your kernel configuration file.
By default, GENERIC will enable this.
When PTRACE is not enabled, several ptrace-like features of the procfs
filesystem will be disabled as well (namely, the ability to read and write
any process' registers, as well as attching, single stepping and detaching
to/from processes).
This should help paranoid people build better sandboxens, and us to build
smaller ramdisks.
Diffstat (limited to 'sys/conf/GENERIC')
| -rw-r--r-- | sys/conf/GENERIC | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/conf/GENERIC b/sys/conf/GENERIC index ce0242f6e7f..60efe6348da 100644 --- a/sys/conf/GENERIC +++ b/sys/conf/GENERIC @@ -1,4 +1,4 @@ -# $OpenBSD: GENERIC,v 1.85 2001/09/17 17:04:27 art Exp $ +# $OpenBSD: GENERIC,v 1.86 2002/03/14 00:42:25 miod Exp $ # # Machine-independent option; used by all architectures for their # GENERIC kernel @@ -15,6 +15,7 @@ option DDB # in-kernel debugger option DIAGNOSTIC # internal consistency checks option KTRACE # system call tracing, a la ktrace(1) option KMEMSTATS # collect malloc(9) statistics +option PTRACE # ptrace(2) system call option CRYPTO # Cryptographic framework |