Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 Oct 1996 16:20:36 +0200 (MET DST)
From:      J Wunsch <j@uriah.heep.sax.de>
To:        freebsd-current@FreeBSD.org (FreeBSD-current users)
Subject:   Re: secure level diffs to kern_mib.c, LINT
Message-ID:  <199610061420.QAA08151@uriah.heep.sax.de>
In-Reply-To: <199610061132.VAA25153@godzilla.zeta.org.au> from Bruce Evans at "Oct 6, 96 09:32:19 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
As Bruce Evans wrote:

> Actually, securelevel 1 is normally so insecure that it shouldn't be used.
> It essentially only provides write protection of /dev/mem and /dev/kmem.
> The write protection on mounted disks is worthless becauses there are
> lots of aliases.  Even plain BSD has a whole disk partition, and FreeBSD
> has lots of slices and SCSI control devices.

The SCSI control devices should deny their service if securelevel is
``secure enough''.

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199610061420.QAA08151>