From owner-freebsd-stable Mon Oct 9 11:11:55 2000 Delivered-To: freebsd-stable@freebsd.org Received: from rover.village.org (rover.village.org [204.144.255.49]) by hub.freebsd.org (Postfix) with ESMTP id 537DE37B502 for ; Mon, 9 Oct 2000 11:11:48 -0700 (PDT) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.11.0/8.11.0) with ESMTP id e99IBjY08824; Mon, 9 Oct 2000 12:11:46 -0600 (MDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id MAA13444; Mon, 9 Oct 2000 12:11:43 -0600 (MDT) Message-Id: <200010091811.MAA13444@harmony.village.org> To: Vivek Khera Subject: Re: make buildworld failing Cc: freebsd-stable@FreeBSD.ORG In-reply-to: Your message of "Mon, 09 Oct 2000 10:21:49 EDT." <14817.54397.228468.872440@onceler.kciLink.com> References: <14817.54397.228468.872440@onceler.kciLink.com> <20001008154111.D96958@freebie.demon.nl> Date: Mon, 09 Oct 2000 12:11:43 -0600 From: Warner Losh Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In message <14817.54397.228468.872440@onceler.kciLink.com> Vivek Khera writes: : >>>>> "a" == andrew writes: : : a> On Sun, 8 Oct 2000, Wilko Bulte wrote: : : >> People already having root privs are not stopped by it. Or is it only aimed : >> at the higher securelevels? : : a> I assume its for secure levels 1 and above and if you were a security : a> conscious site I imagine it would be a very useful feature. : : My question is why does /usr/obj need the schg flag set on anything in : the first place? It basically means that on a secure system you have : to reboot to single user just to delete the build tree. Because it installs a subset of the tree in to /usr/obj and that's the standard way that installs happen. I think that you can say make buildworld -DNOFCHG to prevent this. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message