From owner-freebsd-hackers  Mon May 21 17:25:50 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from mcp.csh.rit.edu (mcp.csh.rit.edu [129.21.60.9])
	by hub.freebsd.org (Postfix) with ESMTP
	id 8D7DF37B424; Mon, 21 May 2001 17:25:48 -0700 (PDT)
	(envelope-from jon@csh.rit.edu)
Received: from fury.csh.rit.edu (fury.csh.rit.edu [129.21.60.5])
	by mcp.csh.rit.edu (Postfix) with ESMTP
	id A461D1165; Mon, 21 May 2001 20:25:47 -0400 (EDT)
Received: by fury.csh.rit.edu (Postfix, from userid 37404)
	id 2E1D12E3E5; Mon, 21 May 2001 20:25:47 -0400 (EDT)
Date: Mon, 21 May 2001 20:25:46 -0400
From: Jon Parise <jon@csh.rit.edu>
To: David Malone <dwmalone@maths.tcd.ie>
Cc: Mike Smith <msmith@FreeBSD.ORG>,
	Warner Losh <imp@harmony.village.org>, freebsd-hackers@FreeBSD.ORG
Subject: Re: sysctl to disable reboot
Message-ID: <20010521202546.G12366@csh.rit.edu>
Mail-Followup-To: David Malone <dwmalone@maths.tcd.ie>,
	Mike Smith <msmith@FreeBSD.ORG>,
	Warner Losh <imp@harmony.village.org>, freebsd-hackers@FreeBSD.ORG
References: <200105212245.f4LMjN903195@mass.dis.org> <200105212340.aa68173@salmon.maths.tcd.ie>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.12i
In-Reply-To: <200105212340.aa68173@salmon.maths.tcd.ie>; from dwmalone@maths.tcd.ie on Mon, May 21, 2001 at 11:40:22PM +0100
X-Operating-System: SunOS 5.8 (sun4u)
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

On Mon, May 21, 2001 at 11:40:22PM +0100, David Malone wrote:

> I could impliment a cons.keymap.securelevel which did:
> 
> 	0: Anyone can change the keymap.
> 	1: Only root can change keys with effects like reboot, panic, ...
> 	2: Only root can make any change to the keymap.
> 
> Or would that be overkill? (The name is certainly a bit silly ;-)

It sounds useful, but it certainly adds a lot of additional
granularity to the system.  Whether that is a good thing is
debatable, however. =)

-- 
Jon Parise (jon@csh.rit.edu)  .  Rochester Inst. of Technology
http://www.csh.rit.edu/~jon/  :  Computer Science House Member

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message