diff options
Diffstat (limited to 'manual')
| -rw-r--r-- | manual/README.tunables | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/manual/README.tunables b/manual/README.tunables index fff6c2a87e..d8c768abcc 100644 --- a/manual/README.tunables +++ b/manual/README.tunables @@ -59,12 +59,13 @@ The list of allowed attributes are: - env_alias: An alias environment variable -- security_level: Specify security level of the tunable. Valid values: +- security_level: Specify security level of the tunable for AT_SECURE + binaries. Valid values are: - SXID_ERASE: (default) Don't read for AT_SECURE binaries and - removed so that child processes can't read it. - SXID_IGNORE: Don't read for AT_SECURE binaries, but retained for - non-AT_SECURE subprocesses. + SXID_ERASE: (default) Do not read and do not pass on to + child processes. + SXID_IGNORE: Do not read, but retain for non-AT_SECURE + child processes. NONE: Read all the time. 2. Use TUNABLE_GET/TUNABLE_SET/TUNABLE_SET_WITH_BOUNDS to get and set tunables. |