From owner-freebsd-security  Tue Jul 31 20:11:20 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mta01-svc.ntlworld.com (mta01-svc.ntlworld.com [62.253.162.41])
	by hub.freebsd.org (Postfix) with ESMTP id F205837B401
	for <freebsd-security@FreeBSD.ORG>; Tue, 31 Jul 2001 20:11:17 -0700 (PDT)
	(envelope-from greid@FreeBSD.org)
Received: from sobek.lan ([62.252.8.20]) by mta01-svc.ntlworld.com
          (InterMail vM.4.01.03.00 201-229-121) with ESMTP
          id <20010801031116.CITT15984.mta01-svc.ntlworld.com@sobek.lan>;
          Wed, 1 Aug 2001 04:11:16 +0100
Date: Wed, 1 Aug 2001 04:11:15 +0100 (BST)
From: George Reid <greid@FreeBSD.org>
X-X-Sender:  <greid@sobek.lan>
To: alexus <ml@db.nexgen.com>
Cc: <freebsd-security@FreeBSD.ORG>
Subject: Re: Operation not permitted
In-Reply-To: <001301c11a37$b654d1a0$0100a8c0@alexus>
Message-ID: <20010801041041.C92484-100000@sobek.lan>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Tue, 31 Jul 2001, alexus wrote:

> su-2.05# sysctl -w kern.securelevel=-1
> kern.securelevel: 1
> sysctl: kern.securelevel: Operation not permitted
> su-2.05# id
> uid=0(root) gid=0(wheel) groups=0(wheel), 2(kmem), 3(sys), 4(tty),
> 5(operator), 20(staff), 31(guest)
> su-2.05#

init(8):
	The kernel runs with four different levels of security.  Any
	super-user process can raise the security level, but no process
	can lower it.

--
+-------------------+---------------------+
|    George Reid    |  FreeBSD Committer  |
|  +44 7740 197460  |  greid@FreeBSD.org  |
+-------------------+---------------------+


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message