From owner-freebsd-security  Sun Oct 17 16:55: 6 1999
Delivered-To: freebsd-security@freebsd.org
Received: from fever.semiotek.com (H253.C225.tor.velocet.net [216.126.82.253])
	by hub.freebsd.org (Postfix) with ESMTP
	id B1C9914CC7; Sun, 17 Oct 1999 16:54:57 -0700 (PDT)
	(envelope-from jread@fever.semiotek.com)
Received: (from jread@localhost)
	by fever.semiotek.com (8.9.3/8.9.3) id TAA11109;
	Sun, 17 Oct 1999 19:56:06 -0400 (EDT)
	(envelope-from jread)
Date: Sun, 17 Oct 1999 19:56:06 -0400
From: Justin Wells <jread@semiotek.com>
To: freebsd-security@freebsd.org
Cc: freebsd-stable@freebsd.org
Subject: cannot buildworld under securelevel
Message-ID: <19991017195606.A11040@semiotek.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0pre3i
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Well, I decided to play with some FreeBSD security stuff, so the other 
day I set my system to run in a securelevel. After I got that working OK, 
I decided to give "jail" a try, so I went and grabbed the patches for 
stable, applied them to my source tree, and did a "make buildworld". 

Guess what? It failed. 

The temporary object files in /usr/obj/usr/src/tmp/usr/lib have been 
marked schg, so buildworld fails. 

I wouldn't expect to be able to do a "make installworld" running under
a securelevel--in fact, I would expect I'd have to be in single user mode.

But I don't want to take my system down to single user mode for the 
duration of the entire "make world" compilation. I want to do the compile, 
drop to single user, install the new world, and reboot. 

It really bugs me that I have to take my system down for a long time 
in order to build the world. These temporary files should not be schg.

Justin



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message