From owner-freebsd-scsi@freebsd.org Fri Feb 23 15:20:53 2018 Return-Path: Delivered-To: freebsd-scsi@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A15EEF2A34B; Fri, 23 Feb 2018 15:20:53 +0000 (UTC) (envelope-from ben.rubson@gmail.com) Received: from mail-wm0-x229.google.com (mail-wm0-x229.google.com [IPv6:2a00:1450:400c:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1957F85DA4; Fri, 23 Feb 2018 15:20:53 +0000 (UTC) (envelope-from ben.rubson@gmail.com) Received: by mail-wm0-x229.google.com with SMTP id t74so5336777wme.3; Fri, 23 Feb 2018 07:20:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:subject:message-id:date:to :mime-version; bh=38E0i+Thnu+pxeDJeO5fnR8pzHlJYtmADgWAsX1vfKU=; b=M/KJiVBTtVVeNr7fg59Of43xVfBeJkjHWBLEspkHseMDK/qJHcz8RpAobx2czxZTmV 0o3LCi53PQgt/AnkyX7BKdR0iWg3ZLRgRg9yXaOW+7xyDHxMX3+QdWRcZd/SjTwKlskS mh6nnYWUnVzUoP72L6wLDSJTXskZKFeYyIGpS0owVOZoLaPaX+u7OjI91CcqEqG9wVLZ j0bvXcYQ+uN2KTGd9iuhszbaYT0a61qpULffEbhLeci4TOz5ezhOlf2ICAXp7kK97fUn po+mRQxVr3nZXxnojm7ReQXWFw9Hxmo6i6DYru8wM5QnzZxrAQdvNBLXc5kWJf0XfPZE JtPg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:subject :message-id:date:to:mime-version; bh=38E0i+Thnu+pxeDJeO5fnR8pzHlJYtmADgWAsX1vfKU=; b=O3x+uOmIbqUXe+vAksAxo1DEaVjY8ehGC9Y/dceccK3+SWmmw9ig6Z2iFTyxvl3U7u 8eyo8YPY8kvNoWTvPu31t0Fa4Zd8vGQQx0v3k0fQh+rioTsUB0Wbcv4N0nXbjCKGRb7S QGZ5K63wEoKECOkQXIMGhQQmAwWRiMFxOVjH0NuC+m7F4Q8PHqpUuQZaf7DxgH1K/DsG x/fRFNofq9vLB+Mr0H6bzeEFrIOjnVvSVMbMbj1Qxt65eeq3IgUePhowlZQ1rq3woLRl u0Tq2ezunaH5zq5bstcG4P/DV325cBifmNGhbKSXvuyLbIQnhmMi7U+8RjmHfLheI6Fs ZmrA== X-Gm-Message-State: APf1xPBntemRkWnqbn4Dt3R4A35ex88DS+OvrriUVYRfAoZnWkwCrv73 qC04lZ8d28X/nbe7cf9B5MzuC+L2 X-Google-Smtp-Source: AH8x225N71NhwjSGt0hBrA84cAgSsvRauS+dwM0WNRggV717A76/4hX3jza//2ro6H3jiHBUa9JI+Q== X-Received: by 10.28.165.12 with SMTP id o12mr1962841wme.120.1519399251741; Fri, 23 Feb 2018 07:20:51 -0800 (PST) Received: from bens-mac.home (LFbn-NIC-1-211-113.w2-15.abo.wanadoo.fr. [2.15.58.113]) by smtp.gmail.com with ESMTPSA id i12sm1736826wmc.35.2018.02.23.07.20.49 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 23 Feb 2018 07:20:50 -0800 (PST) From: Ben RUBSON Content-Type: text/plain; charset=us-ascii; delsp=yes; format=flowed Content-Transfer-Encoding: 7bit Subject: smartmontools and kern.securelevel Message-Id: <0985ABD3-D141-4EE2-B1B3-3016B16E2B68@gmail.com> Date: Fri, 23 Feb 2018 16:20:48 +0100 To: Freebsd fs , FreeBSD-scsi Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) X-BeenThere: freebsd-scsi@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: SCSI subsystem List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Feb 2018 15:20:53 -0000 Hi, I run smartmontools on my storage servers, to launch periodic disk tests and alert on disk errors. Unfortunately, if we set sysctl kern.securelevel >=2, smartmontools does not work anymore. Certainly because it needs to write directly to raw devices. (details of the levels, -1 to 3, in security(7)) Any workaround to this ? Perhaps we could think about allowing SMART commands to be written to disks when sysctl kern.securelevel >=2 ? (I assume smartmontools writes SMART commands) Thank you very much ! Ben