summaryrefslogtreecommitdiff
path: root/sbin/sysctl
AgeCommit message (Collapse)Author
2001-08-18Add a possibility to add a random offset to the stack on exec. This makesArtur Grabowski
it slightly harder to write generic buffer overflows. This doesn't really give any real security, but it raises the bar for script-kiddies and it's really cheap. The range of the random offsets is controlled by the sysctl kern.stackgap_random (must be a power of 2). This is disabled by default right now, but we'll set it to a reasonable value (1024?) soon, after some more testing.
2001-08-02nkmempages.Artur Grabowski
2001-07-13escape a wrning on msgbuf, under certain circumstancesMichael Shalayeff
2001-07-05IPComp support. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-27UVM is no longer an optionArtur Grabowski
2001-06-22Fix more printf formats.Artur Grabowski
Add some missing prototypes.
2001-06-22Fix a bunch of u_int64_t formats.Artur Grabowski
2001-06-22more arguments than formatArtur Grabowski
2001-06-22block on msgbufMichael Shalayeff
2001-06-22unused variableArtur Grabowski
2001-06-22Nicer printing of kmem buckets.Artur Grabowski
2001-06-04return from main() don't exitMichael Shalayeff
2001-06-03kern.nprocsAngelos D. Keromytis
2001-06-03Add kern.fscale and kern.ccpuAngelos D. Keromytis
2001-06-01make listall immune to supuh long names; after deraadtificationMichael Shalayeff
2001-06-01duh, main returnsMichael Shalayeff
2001-06-01do not use strlen after strlcpyMichael Shalayeff
2001-05-14Ignore empty strings in kern.malloc.kmemstat.<foo>, add tty stats.Angelos D. Keromytis
2001-05-14Update.Angelos D. Keromytis
2001-05-12Better argument checking for kmemstats.Angelos D. Keromytis
2001-05-11Put the flag options in a list. (ok deraadt@)Hakan Olsson
2001-05-11Print the new sysctls (nchstats, kmemstats, nselcoll, forkstat)Angelos D. Keromytis
2001-05-11Update with new sysctl'sAngelos D. Keromytis
2001-02-23give cp_time a proper treatmentMichael Shalayeff
2001-02-07by default, don't bark on inbound ND messages, as outsider may be able toJun-ichiro itojun Hagino
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats.
2001-01-28$OpenBSD$Niklas Hallqvist
2001-01-22attempting to sysctl clear a string was failing; checked by millert and aaronTheo de Raadt
2001-01-05Add i386 specific sysctl to modify halt -p processing, required to makeMarco S Hyman
powerdown work correctly on some processors. Idea from mickey@ and smcho@tsp.korea.ac.kr. Tested my me and angelos@. Note: If you want to try these out you'll need to cd /sys/arch/i386/include && sudo install -m 444 -o root -g root cpu.h /usr/include/i386 cd /usr/src/sbin/sysctl && make obj && make && sudo make install to get a sysctl that understands the new variable (machdep.apmhalt).
2001-01-04Sync.Angelos D. Keromytis
2001-01-04Read a struct kmembuckets, rather than individual values.Angelos D. Keromytis
2001-01-04Print the kern.malloc.* branchAngelos D. Keromytis
2000-12-22strlcpy is greatTheo de Raadt
2000-12-21document net.inet6.icmp6.mtudisc_{hi,lo}watJun-ichiro itojun Hagino
2000-11-21Fix an int * that should be a size_t * when calling sysctl(3).Todd C. Miller
2000-10-14document net.inet.tcp.rstppslimit.Jun-ichiro itojun Hagino
2000-10-10mention icmp{,6}.errppslimitJun-ichiro itojun Hagino
2000-09-25docutment path mtu discoveryNiels Provos
2000-09-19Update.Angelos D. Keromytis
2000-09-03Boring... Add :L modifier to all tweakable variables tests.Marc Espie
Closes PR 1246
2000-07-09add description for net.inet6.icmp6.{errppslimit,nd6_maxnudhint}Jun-ichiro itojun Hagino
2000-06-30warnx?/errx? paranoia (use "%s" not a bare string unless it is aTodd C. Miller
constant). These are not security holes but it is worth fixing them anyway both for robustness and so folks looking for examples in the tree are not misled into doing something potentially dangerous. Furthermore, it is a bad idea to assume that pathnames will not include '%' in them and that error routines don't return strings with '%' in them (especially in light of the possibility of locales).
2000-06-14document swapencrypt ctl levelNiels Provos
2000-06-14add swapencrypt ctl level.Niels Provos
2000-06-07s/PIMCTL/PIM6CTL/ for less confusion.Jun-ichiro itojun Hagino
2000-05-25synchronize net.inet{,6} with reality.Jun-ichiro itojun Hagino
add some of vfs.*. (not really sure about other potion).
2000-05-25remove net.inet6.ip6.gif_hlimJun-ichiro itojun Hagino
2000-05-23add vfs.nfs.iothreads short description, add more files and xrefMichael Shalayeff
2000-05-23refer netinet/icmp6.h for ICMPv6 sysctl mib declJun-ichiro itojun Hagino
2000-05-22modify vfs subtree to accomodate for fs-specific variables.Michael Shalayeff
in particular expose vfs.nfs.iothreads, which is a replacement for nfsiod kludge. this is not a netbsd port-over, since this particular implementation builds up the needed variable indexes dynamically (using the already existing `generic' vfs variables), as opposed to netbsd which relies on static matching w/ kernel definitions and configuration... man changes to come soon.
2000-05-18add machdep.vsyncblank sysctl for controlling whether vsync is disabledJason Wright
when the monitor is blanked.