37 lines
1.1 KiB
Diff
37 lines
1.1 KiB
Diff
From: Bastian Blank <waldi@debian.org>
|
|
Subject: Allow access to sensitive SysRq keys to be restricted by default
|
|
Date: Sun, 14 Feb 2010 16:11:35 +0100
|
|
Forwarded: no
|
|
|
|
Add a Kconfig variable to set the initial value of the Magic
|
|
SysRq mask (sysctl: kernel.sysrq).
|
|
|
|
--- a/include/linux/sysrq.h
|
|
+++ b/include/linux/sysrq.h
|
|
@@ -18,7 +18,7 @@
|
|
#include <linux/types.h>
|
|
|
|
/* Enable/disable SYSRQ support by default (0==no, 1==yes). */
|
|
-#define SYSRQ_DEFAULT_ENABLE 1
|
|
+#define SYSRQ_DEFAULT_ENABLE CONFIG_MAGIC_SYSRQ_DEFAULT_MASK
|
|
|
|
/* Possible values of bitmask for enabling sysrq functions */
|
|
/* 0x0001 is reserved for enable everything */
|
|
--- a/lib/Kconfig.debug
|
|
+++ b/lib/Kconfig.debug
|
|
@@ -312,6 +312,14 @@ config MAGIC_SYSRQ
|
|
keys are documented in <file:Documentation/sysrq.txt>. Don't say Y
|
|
unless you really know what this hack does.
|
|
|
|
+config MAGIC_SYSRQ_DEFAULT_MASK
|
|
+ hex "Default mask for Magic SysRq keys on the console"
|
|
+ depends on MAGIC_SYSRQ
|
|
+ default 1
|
|
+ help
|
|
+ Specifies the default mask for the allowed SysRq keys. This can be
|
|
+ used to disable several sensitive keys by default.
|
|
+
|
|
config DEBUG_KERNEL
|
|
bool "Kernel debugging"
|
|
help
|