ctl.4: Document the assumption that CTL HA runs only on trusted networks
ClosedPublic
Actions

Authored by markj on Mon, Aug 3, 2:28 PM.

Details

Reviewers

mav
ken
ziaee

Group Reviewers

secteam

Commits

rG3c8f8432b6f6: ctl.4: Document the assumption that CTL HA runs only on trusted networks

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 75347
Build 72230: arc lint + arc unit

Event Timeline

markj created this revision.Mon, Aug 3, 2:28 PM

Herald added subscribers: ziaee, imp. · View Herald TranscriptMon, Aug 3, 2:28 PM

markj requested review of this revision.Mon, Aug 3, 2:28 PM

Harbormaster completed remote builds in B75347: Diff 183303.Mon, Aug 3, 2:28 PM

mav accepted this revision.Mon, Aug 3, 4:31 PM

This revision is now accepted and ready to land.Mon, Aug 3, 4:31 PM

There is also a standard section defined for this purpose, .Sh SECURITY CONSIDERATIONS.

Looks good to me.

In D58622#1345270, @ziaee wrote:

There is also a standard section defined for this purpose, .Sh SECURITY CONSIDERATIONS.

I thought about adding one, but I'd like the warning to appear close to the sysctl knob which actually enables the unsafe configuration, so that it's harder to miss.

Closed by commit rG3c8f8432b6f6: ctl.4: Document the assumption that CTL HA runs only on trusted networks (authored by markj). · Explain WhyWed, Aug 5, 1:14 PM

This revision was automatically updated to reflect the committed changes.

markj added a commit: rG3c8f8432b6f6: ctl.4: Document the assumption that CTL HA runs only on trusted networks.

Revision Contents
Changeset List

Path

Size

share/

man/

man4/

ctl.4

5 lines

Diff 183303

View Options

ctl.4: Document the assumption that CTL HA runs only on trusted networksClosedPublicActions