wojtek@wojtek.3miasto.net wrote:

> how to make it not showing other processes. good it does not show
> environment variables but i think in multiuser environment it's
> unacceptable that everybody could see what each other is doing.
> 
> how to fix?

You need similar changes for the envp case in sysctl_procargs()
(located in sys/kern/kern_sysctl.c) for the argv case and also in
sysctl_doeproc().  The work isn't that hard but there has been no
agreement as to what knobs enable and disable the functionality.  At the
moment, there is effectively only one knob, the securelevel, whereas we
want a capability model to enable/disable different security features.

Simon.
--
Simon Burge                            <simonb@wasabisystems.com>
NetBSD CDs, Support and Service:    http://www.wasabisystems.com/