From owner-freebsd-questions Sun Sep 21 08:44:30 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id IAA04626 for questions-outgoing; Sun, 21 Sep 1997 08:44:30 -0700 (PDT) Received: from cs.iastate.edu (cs.iastate.edu [129.186.3.1]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id IAA04621 for ; Sun, 21 Sep 1997 08:44:23 -0700 (PDT) Received: from popeye.cs.iastate.edu (popeye.cs.iastate.edu [129.186.3.4]) by cs.iastate.edu (8.8.5/8.7.1) with ESMTP id KAA14287; Sun, 21 Sep 1997 10:44:19 -0500 (CDT) Received: from localhost (ghelmer@localhost) by popeye.cs.iastate.edu (8.8.5/8.7.1) with SMTP id KAA13355; Sun, 21 Sep 1997 10:44:19 -0500 (CDT) X-Authentication-Warning: popeye.cs.iastate.edu: ghelmer owned process doing -bs Date: Sun, 21 Sep 1997 10:44:18 -0500 (CDT) From: Guy Helmer To: Invis cc: freebsd-questions@FreeBSD.ORG Subject: Re: Securelevels In-Reply-To: <19970920105841.22820@visi.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk On Sat, 20 Sep 1997, Invis wrote: > After ready bugtraq and the FreeBSD mailing lists, one of the > things that seems to pop up every now and then are Securelevels, and I > was wondering if someone could please tell me how they are defined, what > each level does and the like. Any explanations will be appreciated! "man 8 init" should describe most of what you are looking for. I believe from reading the kernel sources that there is an undocumented level 3 that precludes any changes to the ipfw IP packet filter list. Guy Helmer Guy Helmer, Computer Science Graduate Student - ghelmer@cs.iastate.edu Iowa State University http://www.cs.iastate.edu/~ghelmer Research Assistant, Scalable Computing Laboratory, Ames Laboratory