13 Commits

Author SHA1 Message Date
abs
25e685524c Punctuation and (non-)capitalization fixes.
From Bug Hunting.
2012-11-22 14:27:32 +00:00
cegger
a02b2c29fa fix secmodel implementation of CPU_UCODE.
ok wiz@ for the manpages
ok elad@
2012-01-17 10:47:26 +00:00
jym
f3effc5ec2 Improvements in secmodel(9). Document secmodel_register(9), _deregister(9)
and _eval(9).

Add secmodel_extensions(9), and indicate the new sysctl(7) to let
ordinary users control the CPU affinity (user_set_cpu_affinity).
2011-12-04 21:08:37 +00:00
wiz
06fb101b70 Improve wording. 2010-12-22 09:08:09 +00:00
jruoho
dafc3c9d20 Note vm.user_va0_disable. 2010-12-21 08:53:25 +00:00
jruoho
4cda92a2b7 Note specifically that kernel modules can be loaded at securelevel 0.
In addition, some markup improvements.
2010-12-14 09:09:52 +00:00
elad
1df9608023 Centralize documentation about exported sysctl variables in the relevant
secmodel's man-page.
2009-10-02 20:31:19 +00:00
mbalmer
70d654f756 Document recent gpio(4) changes and introduce a new config file for GPIO.
Integrate with the startup scripts in /etc/rc.d.  Introduce new variable
"gpio" for /etc/rc.conf.
2009-07-25 16:20:10 +00:00
reed
5c180a1861 Fix Document Title and one line description. 2008-11-11 00:10:39 +00:00
elad
bd9a6d9b4f Add Hugh Graham (hugh@openbsd.org) to the copyright notice.
This man-page is based on OpenBSD's securelevel(7), and the copyright was
not reflecting that (probably due to a copy/paste error on my part; I can't
remember).

Noticed by Jeremy C. Reed, thanks!
2008-11-10 15:00:18 +00:00
snj
4497f1f884 Remove trailing whitespace, correct a spelling error, and fix an xref. 2008-05-28 00:19:52 +00:00
ad
2ecdf58c2c Remove systrace. Ok core@. 2007-12-31 15:31:24 +00:00
elad
6887492c26 Make securelevel a "secmodel" of its own.
While it's true that it's part of the traditional 4.4BSD security model,
there may come a time where a different "primary" security model used for
fine-grained privileges (ie., splitting root's responsibilities to various
privileges that can be assigned) may want to still have a securelevel
setting.

Idea from Daniel Carosone:

  http://mail-index.netbsd.org/tech-security/2006/08/25/0001.html

The location of the removed files, for reference, was:

  src/secmodel/bsd44/secmodel_bsd44_securelevel.c
  src/secmodel/bsd44/securelevel.h
2007-11-21 22:49:05 +00:00