# The debugger, over the network. Off.
#
# docs/architecture/debugging.md milestone D5, and the `Disabled` line below is the
# milestone's own security note being kept. SchOS has no kernel command line, so
# the boot flag the plan asked for is this manifest: a machine that has not been
# told to run this does not run it, and telling it is one line in one file that
# somebody edited on purpose.
#
#   schinitd enable os.schos.schdbgd       (or: set Disabled = no here)
#
# Off rather than loopback-only-and-on, even though loopback-only is already the
# default bind, because "a listener nobody asked for" is a different kind of
# thing from "a listener bound somewhere narrow". A debugger that can read the
# process table should not be running on a machine whose owner never wanted one.
#
# What it can reach is bounded in the kernel rather than here: schdbgd opens
# /dev/dbgro, which refuses any view that declared itself as changing state.
# See include/dbg.h.

Label     = os.schos.schdbgd
Program   = /bin/schdbgd
Args      = schdbgd
Disabled  = yes
RunAtLoad = yes
KeepAlive = yes

ThrottleInterval = 3

StandardOut   = /dev/tty1
StandardError = /dev/tty1