> The problem here is config(8) -u needs kvm(3) to access the changes made > during boot in UKC, with OpenBSD 6.1 access to /dev/{,k}mem was disabled > at securelevel > 0.
Right, and we should probably add the usual text to the description of the -u flag (text taken from tcpbench -k): Index: config.8 =================================================================== RCS file: /var/cvs/src/usr.sbin/config/config.8,v retrieving revision 1.63 diff -u -p -r1.63 config.8 --- config.8 1 May 2017 06:39:25 -0000 1.63 +++ config.8 4 May 2017 15:20:39 -0000 @@ -130,6 +130,11 @@ If so, compare the running kernel with t .Pq Ar infile . If they seem to be the same, apply all configuration changes performed at boot. +Using this option requires read access to +.Pa /dev/mem , +which may be restricted based upon the value of the +.Ar kern.allowkmem +.Xr sysctl 8 . .El .Sh KERNEL BUILDING The output of