[PATCH 4/4] added kernel.tiocsti_restrict sysctl

[Matt Brown]

this patch depends on patches 1, 2 and 3

Allow CONFIG_SECURITY_TIOCSTI_RESTRICT to be controlled via sysctl

Signed-off-by: Matt Brown <m...@nmatt.com>
---
 kernel/sysctl.c | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/kernel/sysctl.c b/kernel/sysctl.c
index acf0a5a..68d1363 100644
--- a/kernel/sysctl.c
+++ b/kernel/sysctl.c
@@ -67,6 +67,7 @@
 #include <linux/kexec.h>
 #include <linux/bpf.h>
 #include <linux/mount.h>
+#include <linux/tty.h>
 
 #include <linux/uaccess.h>
 #include <asm/processor.h>
@@ -833,6 +834,17 @@ static struct ctl_table kern_table[] = {
                .extra2         = &two,
        },
 #endif
+#if defined CONFIG_TTY
+       {
+               .procname       = "tiocsti_restrict",
+               .data           = &tiocsti_restrict,
+               .maxlen         = sizeof(int),
+               .mode           = 0644,
+               .proc_handler   = proc_dointvec_minmax_sysadmin,
+               .extra1         = &zero,
+               .extra2         = &one,
+       },
+#endif
        {
                .procname       = "ngroups_max",
                .data           = &ngroups_max,
-- 
2.10.2