summaryrefslogtreecommitdiff
path: root/sbin/sysctl
AgeCommit message (Collapse)Author
2017-07-19revert previous; the code this was supposed to be used for is movingFlorian Obser
in the wrong direction.
2017-07-17add support for binary sysctl payloads by handling them as hex strings.David Gwynne
this was part of a demo showing how to implement the kernel side of sysctl(3) for setting Semantically Opaque Interface Identifier key material, but it seems to be the most straightforward path toward integrating soiikey handling and rc. ok florian@ sthen@ naddy@ tb@
2017-05-04Merge headers defining identifiers from sysctl.8 into sysctl.3. Shorten andTheo Buehler
update their descriptions. In sysctl.8 refer to /etc/sysctl.conf in FILES. discussed with and ok jmc
2017-04-25Use strtonum instead of strto{,u}ll for simpler and better overflowTheo Buehler
checking, make somaxconn and sominconn unsigned. Issue reported by orge on freenode, thanks! Input, patient explanations and ok deraadt, millert.
2017-03-16remove the list of available sysctls: the sysctls are fullyJason McIntyre
described in sysctl(3) and a list of available sysctls on any particular machine is best retrieved using sysctl; text tweaked by schwarze ok bluhm millert deraadt schwarze
2017-03-16Fix a regression preventing ``kern.profiling'' to return the profilingMartin Pieuchot
state even with a correct kernel. Reported by jmc@, ok tb@
2017-03-11Introduce a new knob to force the first USB keyboard as console input.Martin Pieuchot
By setting "machdep.forceukbd=1" you can now use your USB keyboard in ddb(4) even if your BIOS emulates a pckbd(4). ok tom@, kettenis@, deraadt@
2017-03-04Add machdep.lidaction to list of sysctls.Martin Natano
prodded by Stefan Wollny via tb ok tb jmc
2016-12-22Remove PIM support from the multicast stack.Rafael Zalamena
ok mpi@
2016-10-18Rewrite the kern.malloc.kmemstat in the same style as previous. This one doesOtto Moerbeek
not overflow because the initial count includes empty slots; ok tb@
2016-10-15add kern.dnsjackport;Jason McIntyre
2016-10-09fix heap overflow by rewriting loop; detected by new malloc canariesOtto Moerbeek
ok krw@ beck@
2016-09-28document kern.allowkmem; ok deraadtJason McIntyre
2016-09-23kern.arandom no longer existsTheo de Raadt
from rob pierce
2016-09-21sysctl KERN_ARND is no longer used (in ports, it only occurs in fallbackTheo de Raadt
paths of libevent). This interface was the first generation of what eventually became getentropy(2) and arc4random(3) -- june 1997! Ports scan by sthen, general agreement guenther
2016-09-11Symlinks to binaries should belong to root:bin.Martin Natano
tweaks and ok guenther
2016-09-07Remove usermount remnants. ok teduMartin Natano
2016-09-02for reporting changes, hex and decimal were swappedTheo de Raadt
noticed by pirofti
2016-09-01Export machdep.cpufeature in hex, to avoid - values which madeTheo de Raadt
yuo@ grumpy. ok tom guenther yuo
2016-08-27Pull in <sys/time.h> for struct timespecPhilip Guenther
ok deraadt@
2016-08-14Use int64_t and %ll for CTLTYPE_QUAD nodes.Philip Guenther
Use memcpy() instead of up-casting from char* to long long* ok krw@
2016-07-27correct syntax for baddynamic example. from Holger MikolonTed Unangst
2016-07-27increase the size of forkstat fields to accomodate large valuesTed Unangst
2016-07-20Make the size for the syn cache hash array tunable. As we areAlexander Bluhm
swapping between two syn caches for random reseeding anyway, this feature can be added easily. When the cache is empty, there is an opportunity to change the hash size. This allows an admin under SYN flood attack to defend his machine. Suggested by claudio@; OK jung@ claudio@ jmc@
2016-07-05Remove kern.random remnants; OK deraadt@Tim van der Molen
2016-06-30ntpys sysctl was removedTed Unangst
2016-06-29Document arptimeout, arpdown. Prodded by and ok jmc@Chris Cappuccio
2016-06-18Add net.inet.{tcp,udp}.rootonly sysctl, to mark which portsVincent Gross
cannot be bound to by non-root users. Ok millert@ bluhm@
2016-06-07Document the net.inet.tcp.synuselimit sysctl; OK bluhm@ jmc@Tim van der Molen
2016-06-01Kill sysctl net.inet6.ip6.rr_pruneJeremie Courreges-Anglas
We don't support Router Renumbering and there are no plans to change that. ok mpi@
2016-05-29wxabort bits; ok deraadtJason McIntyre
2016-05-23remove the sysctl kern.random counters, since none of the remainingTheo de Raadt
ones are capable of giving valuable works vs does-not-work evidence. ok tedu
2016-05-23VOP_REALLOCBLKS() and related code is unused since the removal ofMartin Natano
cluster_write(). ok beck zhuk
2016-05-19Remove sysctl net.inet6.ip6.v6onlyJeremie Courreges-Anglas
This sysctl is a no-op, read-only since it was introduced. There are no plans to support IPv4-mapped addresses on OpenBSD, thus this sysctl is meaningless. Noticed by djm@, ok claudio@ mpi@ sthen@ henning@
2016-05-04Kill #ifdef INET6 occurrences in userland.Jeremie Courreges-Anglas
Prompted by and ok millert@ (tcpdump and libpcap left untouched, the #ifdef force is too strong with those)
2016-03-31Don't use .Aq for syntax elements that require ASCII "<>".Ingo Schwarze
Patch from Christian Heckendorf <mbie at ulmus dot me>. OK jmc@ bentley@
2016-03-03Remove option USER_LDT and everything depending on it.Christian Weisgerber
Remove machdep.userldt sysctl. Remove i386_[gs]et_ldt syscall stub from libi386. Remove i386_[gs]et_ldt regression test. ok mlarkin@ millert@ guenther@
2016-02-29delete the kern.emul/KERN_EMUL sysctl bits since there are noChristian Weisgerber
emulations left; ok millert@ deraadt@, jmc@ (man pages)
2015-11-05document the other two net.inet6.ip6.ifq variables, ok logan mikebStuart Henderson
2015-11-05Correct my mistake in the previous patch:Loganaden Velvindron
net.inet6.ip6.ifq -> net.inet6.ip6.ifq.len Pointed out by Mike Belopuhov
2015-11-05Add an entry for net.inet6.ip6.ifq that dlg@ committed a while ago.Loganaden Velvindron
OK dlg@
2015-10-03If we care about placing core files from SUID programs in a safe place,Vadim Zhukov
lets do not suggest to provoke races and use -m option of mkdir(1). ok guenther@, "don't care" deraadt@ :)
2015-04-18Convert many atoi() calls to strtonum(), adding range checks and failureTheo de Raadt
handling along the way. Reviews by Brendan MacDonell, Jeremy Devenport, florian, doug, millert
2015-02-13Direct people to netstat for the new multicast routing sysctls.Philip Guenther
problem noted by dcoppa@ ok claudio@
2015-02-09provide a net.inet6.ip6.ifq sysctl so people can see and fiddleDavid Gwynne
with the ip6intrq. ok claudio@
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
2015-01-14pathconf(1) never happened.Theo de Raadt
ok guenther
2014-12-12put global_ptrace here too so users know how to spell it. poke by jmcTed Unangst
2014-11-19delete the KERN_VNODE sysctl. it fails to provide any isolation from theTed Unangst
kernel struct vnode defintion, and the only consumer (pstat) still needs kvm to read much of the required information. no great loss to always use kvm until there's a better replacement interface. ok deraadt millert uebayasi
2014-10-26Add a format specifier for the printf.Brad Smith
ok guenther@