Date: Thu, 3 Oct 1996 13:09:43 +0900 (JST) From: Michael Hancock <michaelh@cet.co.jp> To: Alex Nash <alex@fa.tdktca.com> Cc: Garrett Wollman <wollman@lcs.mit.edu>, current@freebsd.org Subject: Re: Immutable flags (was: Re: WARNING: botched ld.so commit! :-() Message-ID: <Pine.SV4.3.93.961003130518.13332A-100000@parkplace.cet.co.jp> In-Reply-To: <Pine.BSF.3.91.961002165125.28257V-100000@fa.tdktca.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 2 Oct 1996, Alex Nash wrote: > > /kernel is marked immutable. I'd like to be able to configure systems > > such that you can't change the flags unless you are in single user mode > > even if you're root. > > I believe you can do this by booting up with securelevel == 0 (as opposed > to the default of -1). When the system switches to multi-user mode, init > upgrades securelevel to 1, preventing the immutable flags from being > changed. When downgraded to single-user mode, init changes securelevel > back to 0, allowing you to alter the immutable flags. What am asking for is a kernel config file option so that I don't have to repeatedly edit the source. options INITIAL_SECURE_LEVEL=0 Regards, Mike Hancock
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.SV4.3.93.961003130518.13332A-100000>