From owner-freebsd-stable Fri Mar 9 9:57: 9 2001 Delivered-To: freebsd-stable@freebsd.org Received: from bitbucket.extern.uniface.nl (bitbucket.extern.uniface.nl [193.78.88.139]) by hub.freebsd.org (Postfix) with ESMTP id A3B6337B718 for ; Fri, 9 Mar 2001 09:56:59 -0800 (PST) (envelope-from bert_driehuis@nl.compuware.com) Received: from bh2.nl.compuware.com (unknown [172.16.17.82]) by bitbucket.extern.uniface.nl (Postfix) with ESMTP id AA2048296 for ; Fri, 9 Mar 2001 18:56:57 +0100 (CET) Received: from c1111.nl.compuware.com ([172.16.16.36]) by bh2.nl.compuware.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id GRMZRV5V; Fri, 9 Mar 2001 18:56:57 +0100 Received: from nl.compuware.com (bertd@localhost [127.0.0.1]) by c1111.nl.compuware.com (8.9.3/8.9.3) with ESMTP id SAA02037 for ; Fri, 9 Mar 2001 18:56:57 +0100 (CET) Message-ID: <3AA91969.80E08825@nl.compuware.com> Date: Fri, 09 Mar 2001 18:56:57 +0100 From: Bert Driehuis Organization: Compuware Europe (but I only speak for myself) X-Mailer: Mozilla 4.74 [en] (X11; U; BSD/OS 4.1 i386) X-Accept-Language: en, fr MIME-Version: 1.0 To: stable@FreeBSD.ORG Subject: Re: installworld / securelevel References: <20010309094217.A2487@Odin.AC.HMC.Edu> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Brooks Davis wrote: > I'd suggest you write yourself a script and use it religiously. > Securelevels are definaly in the catagory of thing to be used at your > own risk and only with full knowledge of their effects. I doubt > anyone is going to add anti-foot-shooting code to check for them. Given > what limited use they are, I never use them. It's just too much pain. In that case, the default install should not be installing things like the kernel with the schg set. The way it is now violates the principle of least astonishment. Cheers, -- Bert -- Bert Driehuis, MIS -- bert_driehuis@nl.compuware.com -- +31-20-3116119 Dihydrogen Monoxide kills! Join the campaign at http://www.dhmo.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message