Disable coredump_devctl because it could lead to leaking paths to

jails.

diff --git a/sys/kern/kern_sig.c b/sys/kern/kern_sig.c
index 8410d9d9cec57f3041e15592bd5285f04a327fa0..154c250b4b9112bcd336788f16c1a6312843b7cb 100644 (file)
--- a/sys/kern/kern_sig.c
+++ b/sys/kern/kern_sig.c
@@ -180,7 +180,7 @@ static int  set_core_nodump_flag = 0;
 SYSCTL_INT(_kern, OID_AUTO, nodump_coredump, CTLFLAG_RW, &set_core_nodump_flag,
        0, "Enable setting the NODUMP flag on coredump files");
 
-static int     coredump_devctl = 1;
+static int     coredump_devctl = 0;
 SYSCTL_INT(_kern, OID_AUTO, coredump_devctl, CTLFLAG_RW, &coredump_devctl,
        0, "Generate a devctl notification when processes coredump");