Date: Thu, 3 Jun 2004 23:11:52 -0500 From: Skylar Thompson <skylar@cs.earlham.edu> To: "?.?.????????" <S.V.Salsky@diamondarm.ru> Cc: freebsd-questions@freebsd.org Subject: Re: ipfw: getsockopt(IP_FW_ADD): Operation not permitted Message-ID: <20040604041152.GA48205@quark.cs.earlham.edu> In-Reply-To: <002801c449e9$6ec2e310$5b00a8c0@brilliant.local> References: <001001c4491e$9bfef380$5b00a8c0@brilliant.local> <20040603225923.GC21636@quark.cs.earlham.edu> <002801c449e9$6ec2e310$5b00a8c0@brilliant.local>
next in thread | previous in thread | raw e-mail | index | archive | help
--uAKRQypu60I7Lcqm Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jun 04, 2004 at 10:07:20AM +0600, ?.?.???????? wrote: > Hello, Skylar! >=20 > You are right, the reason was in it. > I modified in /etc/rc.conf kern_securelevel=3D"3" to "-1" and > kern_securelevel_enable=3D"YES". But I think securelevel=3D-1 is too slow= and > dangerous.. As long as you don't need X, I find secure level 1 to be a happy middle ground between the two. Do a "man init" to find out more about secure levels. --=20 -- Skylar Thompson (skylar@cs.earlham.edu) -- http://www.cs.earlham.edu/~skylar/ --uAKRQypu60I7Lcqm Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAv/aIsc4yyULgN4YRAtqTAJ0eM8KAIbiBBo28vY07Q7EncnRBQACffhnS 5ozpgEQ66YLIWB9SqG7+73I= =R8H6 -----END PGP SIGNATURE----- --uAKRQypu60I7Lcqm--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040604041152.GA48205>