upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-10 17:22:46 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add tunable to disable destructive dtrace

Browse source 
Submitted by:	Joerg Pernfuss <code.jpe@gmail.com>
Reviewed by:	rstone, markj
MFC after:	2 weeks
Differential Revision:	https://reviews.freebsd.org/D8624
This commit is contained in:
George V. Neville-Neil 2016-11-23 22:50:20 +00:00
parent 6a368d16c8
commit cdaa8777f7
3 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
sys/cddl/contrib/opensolaris/uts/common/dtrace/dtrace.c
View file

@ -157,6 +157,10 @@
* /etc/system.
*/
int dtrace_destructive_disallow = 0;
#ifndef illumos
/* Positive logic version of dtrace_destructive_disallow for loader tunable */
int dtrace_allow_destructive = 1;
#endif
dtrace_optval_t dtrace_nonroot_maxsize = (16 * 1024 * 1024);
size_t dtrace_difo_maxsize = (256 * 1024);
dtrace_optval_t dtrace_dof_maxsize = (8 * 1024 * 1024);

11
sys/cddl/dev/dtrace/dtrace_load.c
View file

@ -52,6 +52,17 @@ dtrace_load(void *dummy)
int i;
#endif
#ifndef illumos
/*
* DTrace uses negative logic for the destructive mode switch, so it
* is required to translate from the sysctl which uses positive logic.
*/
if (dtrace_allow_destructive)
dtrace_destructive_disallow = 0;
else
dtrace_destructive_disallow = 1;
#endif
/* Hook into the trap handler. */
dtrace_trap_func = dtrace_trap;

3
sys/cddl/dev/dtrace/dtrace_sysctl.c
View file

@ -92,3 +92,6 @@ SYSCTL_QUAD(_kern_dtrace, OID_AUTO, dof_maxsize, CTLFLAG_RW,
SYSCTL_QUAD(_kern_dtrace, OID_AUTO, helper_actions_max, CTLFLAG_RW,
&dtrace_helper_actions_max, 0, "maximum number of allowed helper actions");
SYSCTL_INT(_security_bsd, OID_AUTO, allow_destructive_dtrace, CTLFLAG_RDTUN,
&dtrace_allow_destructive, 1, "Allow destructive mode DTrace scripts");