Date: Tue, 31 Jul 2001 12:49:41 -0400 (EDT) From: Robert Watson <rwatson@FreeBSD.org> To: Alfred Perlstein <bright@mu.org> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/kern kern_prot.c Message-ID: <Pine.NEB.3.96L.1010731124730.46811A-100000@fledge.watson.org> In-Reply-To: <20010731111224.A26571@elvis.mu.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 31 Jul 2001, Alfred Perlstein wrote: > * Robert Watson <rwatson@FreeBSD.org> [010731 10:53] wrote: > > rwatson 2001/07/31 08:48:21 PDT > > > > Modified files: > > sys/kern kern_prot.c > > Log: > > o Introduce new kern.security sysctl tree for kernel security policy > > MIB entries. > > o Relocate kern.suser_permitted to kern.security.suser_permitted. > > Sysctls _probably_ shouldn't be relocated, since they point to memory > locations and/or functions there's really nothing wrong with providing > the old one just to keep people's startup scripts from failing on them. > > If kern.suser_permitted has only been visible in the 5.x tree then feel > free to rename it, however if it has been seen in 4.x then I suggest you > rethink renaming something that people may already be depending on being > set for security reasons in thier startup scripts. Normally I wouldn't relocate a sysctl without leaving behind compatibility stuff (or maybe not at all)--fortunatelly, as you point out, this was never MFC'd to RELENG_4, so shouldn't be a problem. Robert N M Watson FreeBSD Core Team, TrustedBSD Project robert@fledge.watson.org NAI Labs, Safeport Network Services To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1010731124730.46811A-100000>