Subject: Re: sysctl knob to let sugid processes dump core (pr 15994)
To: None <tls@rek.tjls.com>
From: Elad Efrat <elad@NetBSD.org>
List: tech-kern
Date: 01/25/2006 20:30:40
Thor Lancelot Simon wrote:

> Not from my point of view.  From my point of view, we're adding the ability
> for an attacker to harvest sensitive information in a way in which he could
> not harvest it before -- and we're making it possible to turn that on
> without access to the machine's console.

how do you want the securelevel to affect the knob? default disable and
can only be modified in securelevel > 0?

-e.

-- 
Elad Efrat