From owner-freebsd-doc Wed Oct 17 2:28:13 2001 Delivered-To: freebsd-doc@freebsd.org Received: from straylight.ringlet.net (straylight.ringlet.net [217.75.134.254]) by hub.freebsd.org (Postfix) with SMTP id 3440F37B408 for ; Wed, 17 Oct 2001 02:28:08 -0700 (PDT) Received: (qmail 6690 invoked by uid 1000); 17 Oct 2001 09:14:23 -0000 Date: Wed, 17 Oct 2001 12:14:22 +0300 From: Peter Pentchev To: Dima Dorfman Cc: doc@FreeBSD.org Subject: Re: [CFR] Handbook doc for installkernel failure at securelevel Message-ID: <20011017121422.A62555@straylight.oblivion.bg> References: <20010718191837.E29731@ringworld.oblivion.bg> <20010718173755.D9EAE3E2F@bazooka.unixfreak.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010718173755.D9EAE3E2F@bazooka.unixfreak.org>; from dima@unixfreak.org on Wed, Jul 18, 2001 at 10:37:55AM -0700 Sender: owner-freebsd-doc@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, Jul 18, 2001 at 10:37:55AM -0700, Dima Dorfman wrote: > > I think this would be better written: > > ..tries to remove the immutable flag from your old kernel, > and set... > > since not all kernels are named "kernel". > > > + the immutable flag on the new one. Since securelevel 1 > > + or higher prevents changing the immutable flag for any > ^^^^^^^^^^ > > This isn't technicall true. You can set schg on files to your heart's > desire with a raised securelevel; there's no risk in doing that, so > it's allowed. You just can't lower it. A minor nit, perhaps, but > it'd be nice if things were accurate. > > Other than that, it looks pretty good. Thanks for your comments. How about the attached patch? G'luck, Peter -- If you think this sentence is confusing, then change one pig. Index: doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml =================================================================== RCS file: /home/ncvs/doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml,v retrieving revision 1.65 diff -u -r1.65 chapter.sgml --- doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml 2001/10/08 20:30:48 1.65 +++ doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml 2001/10/17 09:17:59 @@ -1206,7 +1206,7 @@ If Something Goes Wrong - There are four categories of trouble that can occur when + There are five categories of trouble that can occur when building a custom kernel. They are: @@ -1241,6 +1241,23 @@ over your configuration, and if you still cannot resolve the problem, send mail to the &a.questions; with your kernel configuration, and it should be diagnosed very quickly. + + + + + Installing the new kernel fails + + + If the kernel compiled fine, but failed to install + (the make install or + make installkernel command failed), + the first thing to check is if your system is running at + securelevel 1 or higher (see &man.init.8;). The kernel + installation tries to remove the immutable flag from + your kernel and set the immutable flag on the new one. + Since securelevel 1 or higher prevents unsetting the immutable + flag for any files on the system, the kernel installation needs + to be performed at securelevel 0 or lower. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-doc" in the body of the message