From owner-freebsd-questions Tue Apr 27 13:43: 5 1999 Delivered-To: freebsd-questions@freebsd.org Received: from resnet.uoregon.edu (resnet.uoregon.edu [128.223.144.32]) by hub.freebsd.org (Postfix) with ESMTP id 7CA1E1508B for ; Tue, 27 Apr 1999 13:42:59 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Received: from localhost (dwhite@localhost) by resnet.uoregon.edu (8.8.8/8.8.8) with ESMTP id NAA11475; Tue, 27 Apr 1999 13:42:33 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Date: Tue, 27 Apr 1999 13:42:32 -0700 (PDT) From: Doug White To: Eugene Sevinian Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Help!; was "kernel security level; Books" In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 28 Apr 1999, Eugene Sevinian wrote: > I got no answer till now and it seems that I failed to exlpain > in previous posting that root is not allowed to modify any files > in /usr/local/etc. I don't understand what you're getting at. Do you _not_ want root to have write permission there, or does it not work now? Please use examples. > As this is my first expierience with freebsd, I would like to know is > there any other posibility to protect some files except setting > kernel's security level !=-1 ? Well, you can't protect files from root since, well, it's the system administrator. :-) Use user accounts and permissions. See `man chmod'. > > Hi ppl, > > Recently I started to use freebsd (3.01) at work , and the first > > thing which I should learn is how to edit some config files in > > /usr/local/etc directory. It was explained in init's man that there are 4 > > levels of security and if it is set to -1 than root can do everything > > according to given file permissions. sysctl tells that this value set to > > -1, so what the matter? At the same time I was able to create new file in > > /usr/local. What I am doing wrong? Doug White Internet: dwhite@resnet.uoregon.edu | FreeBSD: The Power to Serve http://gladstone.uoregon.edu/~dwhite | www.freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message