Matthew Dillon <dil...@apollo.backplane.com> writes: > So making DDB 'secure-level friendly' would be a useful thing > tgo do, I think. The idea is not to disable DDB, but to simply > limit the actions that can be performed within it if the securelevel > has been raised. The sysadmin would only be allowed to issue > passive commands, cont, and 'panic'. The sysadmin would not be > allowed to modify the running system.
That's an excellent idea - it shouldn't be too hard to add a kernel option (say, DDB_RESTRICTED) and #ifndef the "dangerous" commands. DES (must... write... patches...) -- Dag-Erling Smorgrav - d...@flood.ping.uio.no To Unsubscribe: send mail to majord...@freebsd.org with "unsubscribe freebsd-hackers" in the body of the message
