From owner-freebsd-rc@FreeBSD.ORG Fri Jan 13 07:11:33 2012 Return-Path: Delivered-To: freebsd-rc@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2D1801065673 for ; Fri, 13 Jan 2012 07:11:33 +0000 (UTC) (envelope-from utisoft@gmail.com) Received: from mail-iy0-f182.google.com (mail-iy0-f182.google.com [209.85.210.182]) by mx1.freebsd.org (Postfix) with ESMTP id ED0AE8FC12 for ; Fri, 13 Jan 2012 07:11:32 +0000 (UTC) Received: by mail-iy0-f182.google.com with SMTP id z13so5879151iaz.13 for ; Thu, 12 Jan 2012 23:11:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; bh=w7xXHMPmuzaefRKqEqEEkMtLCuN7/9cAbJUz9yVUHI4=; b=mcb1FumMXzbDQEdOUxTHGDD8LEgH3RRzjS2vioXfq4l3rDX6rpQDLHdYJMgNbmS4Gx RIHabGHnqSkK2X62camR4KmTchS68Z0i5s8q734JktnDZP5dpJ3VExVmsAgNrLkJhhuX QiZCSoIlwF3H0StlECIFQv7vd+gCqMmh4PUqk= Received: by 10.42.246.71 with SMTP id lx7mr1461975icb.54.1326438692383; Thu, 12 Jan 2012 23:11:32 -0800 (PST) MIME-Version: 1.0 Sender: utisoft@gmail.com Received: by 10.231.207.7 with HTTP; Thu, 12 Jan 2012 23:11:01 -0800 (PST) In-Reply-To: <20120112234424.GA41056@dragon.NUXI.org> References: <20120112234424.GA41056@dragon.NUXI.org> From: Chris Rees Date: Fri, 13 Jan 2012 07:11:01 +0000 X-Google-Sender-Auth: 4L7lM1NRcioXq_C2leG8R2HvvK0 Message-ID: To: obrien@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-rc@freebsd.org Subject: Re: Problem with LOGIN and cron X-BeenThere: freebsd-rc@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion related to /etc/rc.d design and implementation." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jan 2012 07:11:33 -0000 On 12 January 2012 23:44, David O'Brien wrote: > 'LOGIN' states: > =A0 =A0 =A0 =A0This is a dummy dependency to ensure user services such as= xdm, > =A0 =A0 =A0 =A0inetd, cron and kerberos are started after everything else= , in > =A0 =A0 =A0 =A0case the administrator has increased the system security l= evel > =A0 =A0 =A0 =A0and wants to delay user logins until the system is (almost= ) fully > =A0 =A0 =A0 =A0operational. > > So based on that, 'securelevel' should have: > +# REQUIRE: sysctl > +# BEFORE: =A0LOGIN > Otherwise a cronjob could act against securelevel=3D1+ for a short peroid > of time. Hm, but what if I have an @reboot line in crontab, that relies on securelevel <1? Can't we change the wording in the docs instead? Chris