Page MenuHomeFreeBSD
Differential D58622

ctl.4: Document the assumption that CTL HA runs only on trusted networks
ClosedPublic
Actions

Authored by markj on Aug 3 2026, 2:28 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Oct 9, 4:34 PM
Unknown Object (File)
Fri, Oct 9, 4:01 PM
Unknown Object (File)
Thu, Oct 8, 3:48 PM
Unknown Object (File)
Wed, Oct 7, 10:20 AM
Unknown Object (File)
Tue, Oct 6, 11:58 PM
Unknown Object (File)
Tue, Oct 6, 5:08 AM
Unknown Object (File)
Thu, Oct 1, 7:43 AM
Unknown Object (File)
Tue, Sep 29, 12:04 AM
View All 59 Files
Subscribers
imp
ziaee

Details

Reviewers
mav
ken
ziaee
Group Reviewers
secteam
Commits
rGeddae793c88f: ctl.4: Document the assumption that CTL HA runs only on trusted networks
rG43a34002f6c6: ctl.4: Document the assumption that CTL HA runs only on trusted networks
rGaf488533df80: ctl.4: Document the assumption that CTL HA runs only on trusted networks
rG3c8f8432b6f6: ctl.4: Document the assumption that CTL HA runs only on trusted networks

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj created this revision.Aug 3 2026, 2:28 PM
Herald added subscribers: ziaee, imp. · View Herald TranscriptAug 3 2026, 2:28 PM
markj requested review of this revision.Aug 3 2026, 2:28 PM
Harbormaster completed remote builds in B75347: Diff 183303.Aug 3 2026, 2:28 PM
mav accepted this revision.Aug 3 2026, 4:31 PM
This revision is now accepted and ready to land.Aug 3 2026, 4:31 PM
ziaee accepted this revision.Aug 3 2026, 5:46 PM

There is also a standard section defined for this purpose, .Sh SECURITY CONSIDERATIONS.

ken accepted this revision.Aug 3 2026, 5:50 PM

Looks good to me.

markj added a comment.Aug 3 2026, 6:57 PM
In D58622#1345270, @ziaee wrote:

There is also a standard section defined for this purpose, .Sh SECURITY CONSIDERATIONS.

I thought about adding one, but I'd like the warning to appear close to the sysctl knob which actually enables the unsafe configuration, so that it's harder to miss.

Closed by commit rG3c8f8432b6f6: ctl.4: Document the assumption that CTL HA runs only on trusted networks (authored by markj). · Explain WhyAug 5 2026, 1:14 PM
This revision was automatically updated to reflect the committed changes.
markj added a commit: rG3c8f8432b6f6: ctl.4: Document the assumption that CTL HA runs only on trusted networks.
markj added a commit: rGaf488533df80: ctl.4: Document the assumption that CTL HA runs only on trusted networks.Aug 17 2026, 12:10 PM
markj added a commit: rG43a34002f6c6: ctl.4: Document the assumption that CTL HA runs only on trusted networks.Aug 19 2026, 9:04 PM
cperciva added a commit: rGeddae793c88f: ctl.4: Document the assumption that CTL HA runs only on trusted networks.Aug 20 2026, 5:54 PM
Herald added a reviewer: scheduler. · View Herald TranscriptAug 20 2026, 5:54 PM
lwhsu removed a reviewer: scheduler.Aug 20 2026, 8:12 PM

Revision Contents
Changeset List

PathSize
share/
man/
man4/
7 lines

Diff 183438

View Options

share/man/man4/ctl.4

Loading...