Why sysrq is limited to only "sync" command on official fedora kernel?

Reindl Harald h.reindl at thelounge.net
Wed Feb 25 14:39:10 UTC 2015


Am 25.02.2015 um 15:35 schrieb Ali AlipourR:
>>> Why sysrq is limited to only "sync" command on official fedora kernel?
>>
>> The kernel itself isn't limited.  It's just set that way in
>> /usr/lib/sysctl.d/50-default.conf which is provided by systemd.  You
>> can edit that file, create your own in /etc/sysctrl.d/, or (as root)
>> set it to whatever you would like via /proc/sys/kernel/sysrq.
>
> Of course it can be changed at runtime, but I mean why official fedora
> kernel shouldn't be configured to allow all (or at least a wider
> subset) of sysrq commands by default?
> This way official fedora live CDs are unsuitable for system recovery
> tasks; you have to change sysrq value every time you use live CDs or
> build your own live CD

it is nothing someone is using regulary and that settings are security 
settings recommended by most auditing tools

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20150225/4e1fcb8b/attachment.sig>


More information about the devel mailing list