From 93833c1db634ede8fd3c36cf29d081a2c52fba64 Mon Sep 17 00:00:00 2001
From: Brooks Davis <brooks@FreeBSD.org>
Date: Tue, 12 Jan 2010 18:20:20 +0000
Subject: [PATCH] Declare the kern.ngroups sysctl to be read-only, but tunable
 at boot for better error reporting.

Submitted by:	Matthew Fleming <matthew dot fleming at isilon dot com>
MFC After:	1 month
---
 sys/kern/kern_mib.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sys/kern/kern_mib.c b/sys/kern/kern_mib.c
index e2d061aabf55..7ef580f5ac27 100644
--- a/sys/kern/kern_mib.c
+++ b/sys/kern/kern_mib.c
@@ -124,7 +124,7 @@ SYSCTL_INT(_kern, KERN_ARGMAX, argmax, CTLFLAG_RD,
 SYSCTL_INT(_kern, KERN_POSIX1, posix1version, CTLFLAG_RD,
     0, _POSIX_VERSION, "Version of POSIX attempting to comply to");
 
-SYSCTL_INT(_kern, KERN_NGROUPS, ngroups, CTLFLAG_RD,
+SYSCTL_INT(_kern, KERN_NGROUPS, ngroups, CTLFLAG_RDTUN,
     &ngroups_max, 0,
     "Maximum number of supplemental groups a user can belong to");