From owner-freebsd-questions@FreeBSD.ORG Wed Nov 5 05:45:47 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 279F616A4CE for ; Wed, 5 Nov 2003 05:45:47 -0800 (PST) Received: from be-well.no-ip.com (lowellg.ne.client2.attbi.com [66.30.200.37]) by mx1.FreeBSD.org (Postfix) with ESMTP id 659A243FB1 for ; Wed, 5 Nov 2003 05:45:46 -0800 (PST) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: by be-well.no-ip.com (Postfix, from userid 1147) id A36C83B09; Wed, 5 Nov 2003 08:45:42 -0500 (EST) Sender: lowell@be-well.ilk.org To: Wayne Pascoe References: <20031104202557.GA81029@marvin.penguinpowered.org> From: Lowell Gilbert Date: 05 Nov 2003 08:45:42 -0500 In-Reply-To: <20031104202557.GA81029@marvin.penguinpowered.org> Message-ID: <44llqvapyx.fsf@be-well.ilk.org> Lines: 54 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: freebsd-questions@freebsd.org Subject: Re: securelevel problems X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: freebsd-questions@freebsd.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Nov 2003 13:45:47 -0000 Wayne Pascoe writes: > I'm trying to upgrade a 4.7-RELEASE machine to 4.9. The make buildworld > has gone ok, but installworld failed. You should have built and installed the kernel in between, then rebooted under the new kernel. If this was not what you did, please read the Handbook section on Building the World (carefully) before trying again. > At first, it appeared that this was because the machine was running in > securelevel 1. I had the following in /etc/rc.conf: > kern_securelevel_enable="YES" > kern_securelevel="1" > > I changed that to > kern_securelevel_enable="NO" > kern_securelevel="-1" > > and rebooted the machine. sysctl -a | grep secure shows > kern.securelevel: -1 > > however a make installworld is still failing with: > > Stop in /usr/src/include. > *** Error code 1 > > Stop in /usr/src. > *** Error code 1 > > Stop in /usr/src. > *** Error code 1 > > Stop in /usr/src. > *** Error code 1 > > Stop in /usr/src. The actual errors were a few lines earlier. If they don't make sense to you, please post them for the rest of us to help you there. > I then tried touching my kernel, which also fails, with: > # touch kernel > touch: kernel: Operation not permitted Right. The schg flag is normally set on the kernel to keep it from being modified. > I'm at a bit of a loss as to how to proceed as the only thing I could > think to do was to disable securelevel in /etc/rc.conf :( Right. With a raised securelevel, you can't change the file flags. With the securelevel kept low, you can change them, but you need to do so (with chflags(1)). [make installkernel normally does this for you]