Sysctl - Revision history

Pbug: link

2013-03-28T16:12:37Z

link

← Older revision		Revision as of 09:12, 28 March 2013
Line 1:		Line 1:
	Sysctl - get or set kernel state		Sysctl - get or set [[kernel]] state

	To see a specific kernel state:		To see a specific kernel state:

Franks: added kern.randompid

2006-02-25T00:11:49Z

added kern.randompid

← Older revision		Revision as of 17:11, 24 February 2006
Line 27:		Line 27:

	kern.securelevel: Current secure level # You can only increase this number.		kern.securelevel: Current secure level # You can only increase this number.

			kern.randompid: Chooses a random pid number when a new process is forked, as OpenBSD does by default.

Franks at 23:19, 29 November 2005

2005-11-29T23:19:40Z

← Older revision		Revision as of 16:19, 29 November 2005
Line 23:		Line 23:

	some popular ones you might want to check out:		some popular ones you might want to check out:

	~~net.inet.tcp.blackhole: Do not send RST when dropping refused connections~~

	~~net.inet.udp.blackhole: Do not send port unreachables for refused connects~~

	net.inet.ip.forwarding: Enable IP forwarding between interfaces # To allow your computer to act as a [[router]]		net.inet.ip.forwarding: Enable IP forwarding between interfaces # To allow your computer to act as a [[router]]

	kern.securelevel: Current secure level # You can only increase this number.		kern.securelevel: Current secure level # You can only increase this number.

Franks at 23:18, 29 November 2005

2005-11-29T23:18:32Z

← Older revision		Revision as of 16:18, 29 November 2005
Line 28:		Line 28:
	net.inet.udp.blackhole: Do not send port unreachables for refused connects		net.inet.udp.blackhole: Do not send port unreachables for refused connects

	To allow your computer to act as a [[router]]:		net.inet.ip.forwarding: Enable IP forwarding between interfaces # To allow your computer to act as a [[router]]

	~~net~~.~~inet~~.~~ip.forwarding: Enable IP forwarding between interfaces~~		kern.securelevel: Current secure level # You can only increase this number.

Franks at 23:11, 29 November 2005

2005-11-29T23:11:56Z

← Older revision		Revision as of 16:11, 29 November 2005
Line 25:		Line 25:

	net.inet.tcp.blackhole: Do not send RST when dropping refused connections		net.inet.tcp.blackhole: Do not send RST when dropping refused connections

	net.inet.udp.blackhole: Do not send port unreachables for refused connects		net.inet.udp.blackhole: Do not send port unreachables for refused connects

	To allow your computer to act as a [[router]]:		To allow your computer to act as a [[router]]:

	net.inet.ip.forwarding: Enable IP forwarding between interfaces		net.inet.ip.forwarding: Enable IP forwarding between interfaces

Franks at 23:11, 29 November 2005

2005-11-29T23:11:08Z

New page

Sysctl - get or set kernel state

To see a specific kernel state:

$ sysctl security.bsd.see_other_uids
security.bsd.see_other_uids: 1

What does the tunable do?

$ sysctl -d security.bsd.see_other_uids
security.bsd.see_other_uids: Unprivileged processes may see subjects/objects with different real uid

To change the status of this tunable:

# sysctl security.bsd.see_other_uids=0
security.bsd.see_other_uids: 1 -> 0

We have now changed the system settings to prevent users from seeing information about processes that are being run under another UID.

To list all the currently available non-opaque values:

$ sysctl -a

some popular ones you might want to check out:

net.inet.tcp.blackhole: Do not send RST when dropping refused connections
net.inet.udp.blackhole: Do not send port unreachables for refused connects
To allow your computer to act as a [[router]]:
net.inet.ip.forwarding: Enable IP forwarding between interfaces