Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-08-18 | Add a possibility to add a random offset to the stack on exec. This makes | Artur Grabowski | |
it slightly harder to write generic buffer overflows. This doesn't really give any real security, but it raises the bar for script-kiddies and it's really cheap. The range of the random offsets is controlled by the sysctl kern.stackgap_random (must be a power of 2). This is disabled by default right now, but we'll set it to a reasonable value (1024?) soon, after some more testing. | |||
2001-07-05 | IPComp support. angelos@ ok. | Jean-Jacques Bernard-Gundol | |
2001-06-03 | kern.nprocs | Angelos D. Keromytis | |
2001-06-03 | Add kern.fscale and kern.ccpu | Angelos D. Keromytis | |
2001-05-14 | Update. | Angelos D. Keromytis | |
2001-05-11 | Put the flag options in a list. (ok deraadt@) | Hakan Olsson | |
2001-05-11 | Update with new sysctl's | Angelos D. Keromytis | |
2001-02-07 | by default, don't bark on inbound ND messages, as outsider may be able to | Jun-ichiro itojun Hagino | |
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats. | |||
2001-01-05 | Add i386 specific sysctl to modify halt -p processing, required to make | Marco S Hyman | |
powerdown work correctly on some processors. Idea from mickey@ and smcho@tsp.korea.ac.kr. Tested my me and angelos@. Note: If you want to try these out you'll need to cd /sys/arch/i386/include && sudo install -m 444 -o root -g root cpu.h /usr/include/i386 cd /usr/src/sbin/sysctl && make obj && make && sudo make install to get a sysctl that understands the new variable (machdep.apmhalt). | |||
2001-01-04 | Read a struct kmembuckets, rather than individual values. | Angelos D. Keromytis | |
2001-01-04 | Print the kern.malloc.* branch | Angelos D. Keromytis | |
2000-12-21 | document net.inet6.icmp6.mtudisc_{hi,lo}wat | Jun-ichiro itojun Hagino | |
2000-10-14 | document net.inet.tcp.rstppslimit. | Jun-ichiro itojun Hagino | |
2000-10-10 | mention icmp{,6}.errppslimit | Jun-ichiro itojun Hagino | |
2000-09-25 | docutment path mtu discovery | Niels Provos | |
2000-09-19 | Update. | Angelos D. Keromytis | |
2000-07-09 | add description for net.inet6.icmp6.{errppslimit,nd6_maxnudhint} | Jun-ichiro itojun Hagino | |
2000-06-14 | document swapencrypt ctl level | Niels Provos | |
2000-05-25 | synchronize net.inet{,6} with reality. | Jun-ichiro itojun Hagino | |
add some of vfs.*. (not really sure about other potion). | |||
2000-05-25 | remove net.inet6.ip6.gif_hlim | Jun-ichiro itojun Hagino | |
2000-05-23 | add vfs.nfs.iothreads short description, add more files and xref | Michael Shalayeff | |
2000-05-23 | refer netinet/icmp6.h for ICMPv6 sysctl mib decl | Jun-ichiro itojun Hagino | |
2000-05-18 | add machdep.vsyncblank sysctl for controlling whether vsync is disabled | Jason Wright | |
when the monitor is blanked. | |||
2000-04-25 | mention tcp identifiers; miodrag@ifrance.com | Theo de Raadt | |
2000-03-18 | Remove hard sentence breaks, and some other cleanup along the way. | Aaron Campbell | |
2000-01-21 | ip4.allow -> ipip.allow | Angelos D. Keromytis | |
2000-01-17 | Document new ipx sysctl vars. | Federico G. Schwindt | |
2000-01-10 | Fix wrong type of variable. | Angelos D. Keromytis | |
2000-01-10 | Rename variable for consistency. | Angelos D. Keromytis | |
2000-01-10 | Some new sysctl variables. | Angelos D. Keromytis | |
2000-01-10 | Document ip.ipsec-invalid-timeout | Angelos D. Keromytis | |
2000-01-09 | ipsec-acl entry | Angelos D. Keromytis | |
2000-01-07 | gre.allow and mobileip.allow | Angelos D. Keromytis | |
2000-01-06 | add missing variables under net.inet6.ip6. | Jun-ichiro itojun Hagino | |
2000-01-02 | implement net.inet6.icmp6.nodeinfo sysctl, which disables | Jun-ichiro itojun Hagino | |
ICMPv6 node information query (and FQDN query - old variant). kame repository has the change as well. | |||
1999-12-30 | vm.swapencrypt | Niels Provos | |
1999-12-10 | add IPv6 support. net.inet6.{ip6,icmp6} will be printed. | Jun-ichiro itojun Hagino | |
1999-10-28 | net.inet.etherip.allow sysctl | Angelos D. Keromytis | |
1999-10-17 | Formatting fix. | Aaron Campbell | |
1999-10-07 | Mention machdep.allow_aparture and machdep.kbdreset -- OK aaron@ | Wim Vandeputte | |
1999-09-02 | Treat kern.hostid as a u_int, and clean up parsing of integers on the command | Paul Janzen | |
line. | |||
1999-06-29 | mention kern.arandom | Niels Provos | |
1999-05-21 | typo | Marc Espie | |
1999-05-19 | document tcp.sack and tcp.mssdflt for sysctl | Niels Provos | |
1999-04-11 | Introduce net.inet.{ah,esp}.enable sysctl controls that are off by default. | Niklas Hallqvist | |
If you are going to use either of AH or ESP or both, enable these in /etc/sysctl.conf. Also correct the IPSec debugging sysctl code, it is now named net.inet.ip.encdebug. Some corrected function signatures too. | |||
1999-04-09 | The userland parts of a sysctl that can switch on/off IP-in-IP (protocol 4) | Niklas Hallqvist | |
1999-02-25 | Document name change for sysctl encdebug. | Angelos D. Keromytis | |
1999-02-24 | New position for the encdebug variable. | Angelos D. Keromytis | |
1999-02-23 | add machdep.apmwarn to doc | Marco S Hyman | |
1998-06-15 | use Bx macro for BSD versions | Michael Shalayeff | |