From owner-freebsd-security  Tue Jul 31 20:16:42 2001
Delivered-To: freebsd-security@freebsd.org
Received: from db.nexgen.com (db.nexgen.com [66.92.98.149])
	by hub.freebsd.org (Postfix) with SMTP id F22EC37B403
	for <freebsd-security@FreeBSD.ORG>; Tue, 31 Jul 2001 20:16:30 -0700 (PDT)
	(envelope-from ml@db.nexgen.com)
Received: (qmail 92976 invoked from network); 1 Aug 2001 03:16:26 -0000
Received: from localhost.nexgen.com (HELO alexus) (root@127.0.0.1)
  by localhost.nexgen.com with SMTP; 1 Aug 2001 03:16:26 -0000
Message-ID: <006601c11a38$bc519b00$0100a8c0@alexus>
From: "alexus" <ml@db.nexgen.com>
To: "George Reid" <greid@FreeBSD.org>
Cc: <freebsd-security@FreeBSD.ORG>
References: <20010801041041.C92484-100000@sobek.lan>
Subject: Re: Operation not permitted
Date: Tue, 31 Jul 2001 23:19:11 -0400
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2479.0006
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2479.0006
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

intersting... so basically what you sayin the only way to lower it is by
seting my boot scripts to -1 and restart ?

----- Original Message -----
From: "George Reid" <greid@FreeBSD.org>
To: "alexus" <ml@db.nexgen.com>
Cc: <freebsd-security@FreeBSD.ORG>
Sent: Tuesday, July 31, 2001 11:11 PM
Subject: Re: Operation not permitted


> On Tue, 31 Jul 2001, alexus wrote:
>
> > su-2.05# sysctl -w kern.securelevel=-1
> > kern.securelevel: 1
> > sysctl: kern.securelevel: Operation not permitted
> > su-2.05# id
> > uid=0(root) gid=0(wheel) groups=0(wheel), 2(kmem), 3(sys), 4(tty),
> > 5(operator), 20(staff), 31(guest)
> > su-2.05#
>
> init(8):
> The kernel runs with four different levels of security.  Any
> super-user process can raise the security level, but no process
> can lower it.
>
> --
> +-------------------+---------------------+
> |    George Reid    |  FreeBSD Committer  |
> |  +44 7740 197460  |  greid@FreeBSD.org  |
> +-------------------+---------------------+
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message