Very few users require destructive dtrace, so it is a good candidate for the installer hardening menu. It is currently enabled by default since this was the historic state before the tuneable was introduced.
Details
Details
Diff Detail
Diff Detail
- Repository
- rS FreeBSD src repository - subversion
- Lint
Lint Not Applicable - Unit
Tests Not Applicable
Event Timeline
usr.sbin/bsdinstall/scripts/hardening | ||
---|---|---|
50 ↗ | (On Diff #33355) | Might be better worded as "Disallow DTrace destructive-mode" |