From owner-cvs-all Tue Jul 31 9:50: 5 2001 Delivered-To: cvs-all@freebsd.org Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by hub.freebsd.org (Postfix) with ESMTP id 1620D37B401; Tue, 31 Jul 2001 09:49:55 -0700 (PDT) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (robert@fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.11.4/8.11.4) with SMTP id f6VGnff46829; Tue, 31 Jul 2001 12:49:41 -0400 (EDT) (envelope-from robert@fledge.watson.org) Date: Tue, 31 Jul 2001 12:49:41 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org To: Alfred Perlstein Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/kern kern_prot.c In-Reply-To: <20010731111224.A26571@elvis.mu.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, 31 Jul 2001, Alfred Perlstein wrote: > * Robert Watson [010731 10:53] wrote: > > rwatson 2001/07/31 08:48:21 PDT > > > > Modified files: > > sys/kern kern_prot.c > > Log: > > o Introduce new kern.security sysctl tree for kernel security policy > > MIB entries. > > o Relocate kern.suser_permitted to kern.security.suser_permitted. > > Sysctls _probably_ shouldn't be relocated, since they point to memory > locations and/or functions there's really nothing wrong with providing > the old one just to keep people's startup scripts from failing on them. > > If kern.suser_permitted has only been visible in the 5.x tree then feel > free to rename it, however if it has been seen in 4.x then I suggest you > rethink renaming something that people may already be depending on being > set for security reasons in thier startup scripts. Normally I wouldn't relocate a sysctl without leaving behind compatibility stuff (or maybe not at all)--fortunatelly, as you point out, this was never MFC'd to RELENG_4, so shouldn't be a problem. Robert N M Watson FreeBSD Core Team, TrustedBSD Project robert@fledge.watson.org NAI Labs, Safeport Network Services To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message