Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 4 Jun 2004 15:22:32 -0700
From:      Brooks Davis <brooks@one-eyed-alien.net>
To:        "J.D. Bronson" <jbronson@wixb.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: more on fsck with securelevel
Message-ID:  <20040604222232.GB25234@Odin.AC.HMC.Edu>
In-Reply-To: <6.1.1.1.2.20040604170255.00bf3b38@cheyenne.wixb.com>
References:  <6.1.1.1.2.20040604170255.00bf3b38@cheyenne.wixb.com>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
On Fri, Jun 04, 2004 at 05:05:34PM -0500, J.D. Bronson wrote:
> I did set this in /etc/rc.conf:
> fsck_y_enable="YES"
> 
> But I was wondering if this might be a good idea too:
> (looking at the defaults)
> 
> fsck_y_enable="NO"      # Set to YES to do fsck -y if the initial preen 
> fails.
> background_fsck="YES"   # Attempt to run fsck in the background where 
> possible.
> background_fsck_delay="60" # Time to wait (seconds) before starting the 
> fsck.
> 
> ..might it not be prudent to set 'background_fsck="NO"' when running in 
> secure mode?
> 
> Eventhough I shut down carefully, sometimes it still feels the need to run 
> fsck (even with soft updates)...but when running securelevel, is it 
> actually going to accomplish anything?

I think just setting background_fsck_delay=0 may allow bgfsck to work.
Once fsck has opened the FS, I think it should keep it open and writes
should work.  I'm not 100% sure of that though.

-- Brooks

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFAwPYnXY6L6fI4GtQRAt16AKC5TTVlz+oklnD4Mk2YIKe5b2T4wgCgsuZY
Nf08dEIFqZfEwTlI/y/uwjI=
=WFkV
-----END PGP SIGNATURE-----
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040604222232.GB25234>