summaryrefslogtreecommitdiff
path: root/sys/crypto
diff options
context:
space:
mode:
authorMike Belopuhov <mikeb@cvs.openbsd.org>2010-12-14 20:26:45 +0000
committerMike Belopuhov <mikeb@cvs.openbsd.org>2010-12-14 20:26:45 +0000
commitd976f152bf123c6fd9d30a4de2f815a40093eb54 (patch)
tree6abe5a0031626a7de388bed78ec244bfd92e71a9 /sys/crypto
parent19880e25c38df0d3f3eb20e536aa400d9b069601 (diff)
disable access to the crypto(4) device from userland; ok deraadt
Diffstat (limited to 'sys/crypto')
-rw-r--r--sys/crypto/cryptodev.c6
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/crypto/cryptodev.c b/sys/crypto/cryptodev.c
index f94eff769b5..ca54d1df247 100644
--- a/sys/crypto/cryptodev.c
+++ b/sys/crypto/cryptodev.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: cryptodev.c,v 1.74 2010/10/06 22:19:20 mikeb Exp $ */
+/* $OpenBSD: cryptodev.c,v 1.75 2010/12/14 20:26:44 mikeb Exp $ */
/*
* Copyright (c) 2001 Theo de Raadt
@@ -114,8 +114,8 @@ int cryptodev_dokey(struct crypt_kop *kop, struct crparam kvp[]);
int cryptodev_cb(struct cryptop *);
int cryptodevkey_cb(struct cryptkop *);
-int usercrypto = 1; /* userland may do crypto requests */
-int userasymcrypto = 1; /* userland may do asymmetric crypto reqs */
+int usercrypto = 0; /* userland may do crypto requests */
+int userasymcrypto = 0; /* userland may do asymmetric crypto reqs */
int cryptodevallowsoft = 0; /* only use hardware crypto */
/* ARGSUSED */