Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 27 Apr 1999 13:42:32 -0700 (PDT)
From:      Doug White <dwhite@resnet.uoregon.edu>
To:        Eugene Sevinian <sevinian@aya.yerphi.am>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Help!;   was "kernel security level; Books"
Message-ID:  <Pine.BSF.4.03.9904271341150.2463-100000@resnet.uoregon.edu>
In-Reply-To: <Pine.LNX.3.96.990428003320.25315A-100000@aya.yerphi.am>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 28 Apr 1999, Eugene Sevinian wrote:

> I got no answer till now and it seems that I failed to exlpain
> in previous posting that root is not allowed to modify any files
> in /usr/local/etc. 

I don't understand what you're getting at.  Do you _not_ want root to have
write permission there, or does it not work now?  Please use examples.

> As this is my first expierience with freebsd, I would like to know is
> there any other posibility to protect some files except setting
> kernel's security level !=-1 ?

Well, you can't protect files from root since, well, it's the system
administrator. :-)  Use user accounts and permissions.  See `man chmod'.

> > Hi ppl, 
> > Recently I started to use freebsd (3.01) at work , and the first
> > thing which I should learn is how to edit some config files in
> > /usr/local/etc directory. It was explained in init's man that there are 4
> > levels of security and if it is set to -1 than root can do everything
> > according to given file permissions. sysctl tells that this value set to
> > -1, so what the matter?  At the same time I was able to create new file in
> > /usr/local.  What I am doing wrong?

Doug White                               
Internet:  dwhite@resnet.uoregon.edu    | FreeBSD: The Power to Serve
http://gladstone.uoregon.edu/~dwhite    | www.freebsd.org



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.03.9904271341150.2463-100000>