On 2017-09-12, Nan Xiao <[email protected]> wrote: > Hi trondd, > > Thanks for your answer! > > I try to use "sysctl" command to modify "kern.allowkmem"'s value: > > # sysctl kern.allowkmem=1 > sysctl: kern.allowkmem: Operation not permitted > > Since it doesn't work. So I create a "/etc/sysctl.conf" and add > follwing value: > > kern.allowkmem=1 > > After referring the manuals of sysctl(https://man.openbsd.org/sysctl.8) > and sysctl.conf(https://man.openbsd.org/sysctl.conf.5), I can't find > how to reload the sysctl.conf, so I have no choine but to reboot it and > it takes effect. > > So the only method of reloading sysctl.conf is just reboot? Sorry for > my further question.
Irrespective of how you reload sysctl.conf for "normal" sysctls (which is a different issue and came up on misc@ recently), the kern.allowkmem sysctl can *only* be raised before securelevel is set during boot. (Alternatively the allowkmem variable can be poked directly via ddb).
