Page MenuHomeFreeBSD
Differential D12474

Add destructive dtrace to bsdinstall hardening menu
ClosedPublic
Actions

Authored by code.jpe_gmail.com on Sep 23 2017, 2:13 PM.
Tags
None
Referenced Files
F168707724: D12474.id33355.diff
Sat, Aug 29, 6:06 PM
Unknown Object (File)
Thu, Aug 27, 5:57 PM
Unknown Object (File)
Wed, Aug 26, 1:09 PM
Unknown Object (File)
Tue, Aug 25, 12:56 AM
Unknown Object (File)
Mon, Aug 24, 2:18 AM
Unknown Object (File)
Mon, Aug 24, 2:18 AM
Unknown Object (File)
Thu, Aug 20, 4:16 AM
Unknown Object (File)
Mon, Aug 17, 4:40 PM
View All Files
Subscribers
imp

Details

Reviewers
allanjude
gnn
des
Commits
rS338852: Add an installer option to disable destructive dtrace.
Summary

Very few users require destructive dtrace, so it is a good candidate for the installer hardening menu. It is currently enabled by default since this was the historic state before the tuneable was introduced.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

code.jpe_gmail.com created this revision.Sep 23 2017, 2:13 PM
Herald added a subscriber: imp. · View Herald TranscriptSep 23 2017, 2:13 PM
code.jpe_gmail.com added a reviewer: gnn.Sep 24 2017, 7:46 AM
allanjude added inline comments.Oct 2 2017, 4:32 AM
usr.sbin/bsdinstall/scripts/hardening
50

Might be better worded as "Disallow DTrace destructive-mode"

code.jpe_gmail.com updated this revision to Diff 34121.Oct 18 2017, 7:48 PM
code.jpe_gmail.com marked an inline comment as done.
gnn accepted this revision.Nov 13 2017, 1:33 AM
This revision is now accepted and ready to land.Nov 13 2017, 1:33 AM
code.jpe_gmail.com added a reviewer: des.Sep 20 2018, 6:42 AM
Closed by commit rS338852: Add an installer option to disable destructive dtrace. (authored by des). · Explain WhySep 21 2018, 9:27 AM
This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

PathSize
usr.sbin/
bsdinstall/
scripts/
5 lines

Diff 34121

View Options

usr.sbin/bsdinstall/scripts/hardening

Loading...