Document `hardening.pax.prohibit_new_usb` sysctl tunable
authored
by
Signed-off-by: Shawn Webb <shawn.webb@hardenedbsd.org>
Signed-off-by: Shawn Webb <shawn.webb@hardenedbsd.org>