From owner-freebsd-doc  Fri Feb  2 15:20:21 2001
Delivered-To: freebsd-doc@freebsd.org
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id C098037B491
	for <freebsd-doc@freebsd.org>; Fri,  2 Feb 2001 15:20:01 -0800 (PST)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.11.1/8.11.1) id f12NK1448607;
	Fri, 2 Feb 2001 15:20:01 -0800 (PST)
	(envelope-from gnats)
Received: from chmls06.mediaone.net (chmls06.mediaone.net [24.147.1.144])
	by hub.freebsd.org (Postfix) with ESMTP id 8D83E37B69D
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  2 Feb 2001 15:14:01 -0800 (PST)
Received: from be-well.ilk.org (lowellg.ne.mediaone.net [24.147.184.128])
	by chmls06.mediaone.net (8.11.1/8.11.1) with ESMTP id f12NE0K14598
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 2 Feb 2001 18:14:00 -0500 (EST)
Received: (from lowell@localhost)
	by be-well.ilk.org (8.11.2/8.11.2) id f12NDxi05524;
	Fri, 2 Feb 2001 18:13:59 -0500 (EST)
	(envelope-from lowell)
Message-Id: <200102022313.f12NDxi05524@be-well.ilk.org>
Date: Fri, 2 Feb 2001 18:13:59 -0500 (EST)
From: lgfbsd@lowellg.ne.mediaone.net
Reply-To: lgfbsd@lowellg.ne.mediaone.net
To: FreeBSD-gnats-submit@freebsd.org
X-Send-Pr-Version: 3.2
Subject: docs/24809: info on X and securelevels
Sender: owner-freebsd-doc@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         24809
>Category:       docs
>Synopsis:       info on X and securelevels
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-doc
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Fri Feb 02 15:20:01 PST 2001
>Closed-Date:
>Last-Modified:
>Originator:     Lowell Gilbert
>Release:        FreeBSD 4.2-STABLE i386
>Organization:
n/a
>Environment:

install for 4.2-RELEASE (and on, I assume)

>Description:

The install now gives the opportunity to set an elevated securelevel,
resulting in lots of questions about why X won't start.  

It would be better to take care of this at install time, but I'm not
really sure how to do that; there's too much to securelevels to
explain all of it in the install itself.  My preference would be that
the option shouldn't be at install time at all, but I doubt that will
fly.

>How-To-Repeat:

watch the questions

>Fix:

[quick hackwork, but it's at least a starting place]

*** book.sgml~  Fri Feb  2 10:06:05 2001
--- book.sgml   Fri Feb  2 17:57:51 2001
***************
*** 6733,6738 ****
--- 6733,6764 ----
        </qandaentry>
  
        <qandaentry>
+         <question id="running-X-securelevels">
+           <para>I <emphasis>tried</emphasis> to run X, but I get an
+         <literal>KDENABIO failed (Operation not permitted)</literal>
+           error when I type <command>startx</command>!
+         What do I do now?</para>
+         </question>
+ 
+         <answer>
+ 
+           <para>Your system is running at a raised securelevel, isn't
+            it?  It is, indeed, impossible to start X at a raised
+            securelevel. [To see why, look at the
+          <ulink URL="http://www.FreeBSD.org/cgi/man.cgi?init(8)">
+            init(8)</ulink> man page]</para>
+ 
+           <para>So the question is what else you should do instead,
+            and you basically have two choices: set your securelevel
+            back down to zero (usually from
+            <filename>/etc/rc.conf</filename>), or run
+          <link linkend=xdm-boot>xdm</link> at boot time (before the
+            securelevel is raised).</para>
+ 
+         </answer>
+       </qandaentry>
+ 
+       <qandaentry>
          <question id="x-and-moused">
            <para>Why doesn't my mouse work with X?</para>
          </question>

>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-doc" in the body of the message