summaryrefslogtreecommitdiff
path: root/sbin/sysctl/sysctl.8
AgeCommit message (Collapse)Author
2001-08-18Add a possibility to add a random offset to the stack on exec. This makesArtur Grabowski
it slightly harder to write generic buffer overflows. This doesn't really give any real security, but it raises the bar for script-kiddies and it's really cheap. The range of the random offsets is controlled by the sysctl kern.stackgap_random (must be a power of 2). This is disabled by default right now, but we'll set it to a reasonable value (1024?) soon, after some more testing.
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-03kern.nprocsAngelos D. Keromytis
2001-06-03Add kern.fscale and kern.ccpuAngelos D. Keromytis
2001-05-14Update.Angelos D. Keromytis
2001-05-11Put the flag options in a list. (ok deraadt@)Hakan Olsson
2001-05-11Update with new sysctl'sAngelos D. Keromytis
2001-02-07by default, don't bark on inbound ND messages, as outsider may be able toJun-ichiro itojun Hagino
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats.
2001-01-05Add i386 specific sysctl to modify halt -p processing, required to makeMarco S Hyman
powerdown work correctly on some processors. Idea from mickey@ and smcho@tsp.korea.ac.kr. Tested my me and angelos@. Note: If you want to try these out you'll need to cd /sys/arch/i386/include && sudo install -m 444 -o root -g root cpu.h /usr/include/i386 cd /usr/src/sbin/sysctl && make obj && make && sudo make install to get a sysctl that understands the new variable (machdep.apmhalt).
2001-01-04Read a struct kmembuckets, rather than individual values.Angelos D. Keromytis
2001-01-04Print the kern.malloc.* branchAngelos D. Keromytis
2000-12-21document net.inet6.icmp6.mtudisc_{hi,lo}watJun-ichiro itojun Hagino
2000-10-14document net.inet.tcp.rstppslimit.Jun-ichiro itojun Hagino
2000-10-10mention icmp{,6}.errppslimitJun-ichiro itojun Hagino
2000-09-25docutment path mtu discoveryNiels Provos
2000-09-19Update.Angelos D. Keromytis
2000-07-09add description for net.inet6.icmp6.{errppslimit,nd6_maxnudhint}Jun-ichiro itojun Hagino
2000-06-14document swapencrypt ctl levelNiels Provos
2000-05-25synchronize net.inet{,6} with reality.Jun-ichiro itojun Hagino
add some of vfs.*. (not really sure about other potion).
2000-05-25remove net.inet6.ip6.gif_hlimJun-ichiro itojun Hagino
2000-05-23add vfs.nfs.iothreads short description, add more files and xrefMichael Shalayeff
2000-05-23refer netinet/icmp6.h for ICMPv6 sysctl mib declJun-ichiro itojun Hagino
2000-05-18add machdep.vsyncblank sysctl for controlling whether vsync is disabledJason Wright
when the monitor is blanked.
2000-04-25mention tcp identifiers; miodrag@ifrance.comTheo de Raadt
2000-03-18Remove hard sentence breaks, and some other cleanup along the way.Aaron Campbell
2000-01-21ip4.allow -> ipip.allowAngelos D. Keromytis
2000-01-17Document new ipx sysctl vars.Federico G. Schwindt
2000-01-10Fix wrong type of variable.Angelos D. Keromytis
2000-01-10Rename variable for consistency.Angelos D. Keromytis
2000-01-10Some new sysctl variables.Angelos D. Keromytis
2000-01-10Document ip.ipsec-invalid-timeoutAngelos D. Keromytis
2000-01-09ipsec-acl entryAngelos D. Keromytis
2000-01-07gre.allow and mobileip.allowAngelos D. Keromytis
2000-01-06add missing variables under net.inet6.ip6.Jun-ichiro itojun Hagino
2000-01-02implement net.inet6.icmp6.nodeinfo sysctl, which disablesJun-ichiro itojun Hagino
ICMPv6 node information query (and FQDN query - old variant). kame repository has the change as well.
1999-12-30vm.swapencryptNiels Provos
1999-12-10add IPv6 support. net.inet6.{ip6,icmp6} will be printed.Jun-ichiro itojun Hagino
1999-10-28net.inet.etherip.allow sysctlAngelos D. Keromytis
1999-10-17Formatting fix.Aaron Campbell
1999-10-07Mention machdep.allow_aparture and machdep.kbdreset -- OK aaron@Wim Vandeputte
1999-09-02Treat kern.hostid as a u_int, and clean up parsing of integers on the commandPaul Janzen
line.
1999-06-29mention kern.arandomNiels Provos
1999-05-21typoMarc Espie
1999-05-19document tcp.sack and tcp.mssdflt for sysctlNiels Provos
1999-04-11Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default.Niklas Hallqvist
If you are going to use either of AH or ESP or both, enable these in /etc/sysctl.conf. Also correct the IPSec debugging sysctl code, it is now named net.inet.ip.encdebug. Some corrected function signatures too.
1999-04-09The userland parts of a sysctl that can switch on/off IP-in-IP (protocol 4)Niklas Hallqvist
1999-02-25Document name change for sysctl encdebug.Angelos D. Keromytis
1999-02-24New position for the encdebug variable.Angelos D. Keromytis
1999-02-23add machdep.apmwarn to docMarco S Hyman
1998-06-15use Bx macro for BSD versionsMichael Shalayeff