]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
sysctls which should be restricted when securelevel is raised should also
authorstevek <stevek@FreeBSD.org>
Fri, 17 May 2019 18:09:48 +0000 (18:09 +0000)
committerstevek <stevek@FreeBSD.org>
Fri, 17 May 2019 18:09:48 +0000 (18:09 +0000)
commit412e9689989cab76d624530a3480a7c26ab90b3d
tree21e5634062e6f0d8e7eeb56e3b7b6b40219f241e
parent389ba2db68b251888253dc7f2be82e9659404dbf
sysctls which should be restricted when securelevel is raised should also
be restricted when veriexec is enforced.

Add mpo_system_check_sysctl method to mac_veriexec which does this.

Obtained from: Juniper Networks, Inc.
MFC after: 1 week
sys/security/mac_veriexec/mac_veriexec.c