On Mon, Jul 21, 2025 at 06:19:05PM +0200, Dag-Erling Smørgrav wrote:
Presumably, these are lines from your /boot/loader.conf.
security.bsd.allow_destructive_dtrace=0
This is a tunable, not a sysctl (although a sysctl of the same name will
appear if dtrace is compiled into the kernel or loaded)
Odd that bsdinstall adds it to loader.conf then. It was added
towards the end of an installation where one would choose
hardening. It's from a -current machine but am not sure/can't remember
if it's always been -current.
--