Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 05 Jan 2001 18:07:26 -0800
From:      Dima Dorfman <dima@unixfreak.org>
To:        peter@sysadmin-inc.com
Cc:        freebsd-security@freebsd.org
Subject:   Re: changing kernsecurelevel 
Message-ID:  <20010106020731.7678E3E02@bazooka.unixfreak.org>
In-Reply-To: Message from "Peter Brezny" <peter@sysadmin-inc.com>  of "Fri, 05 Jan 2001 20:49:21 PST." <001101c0779c$096cc260$46010a0a@sysadmininc.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
> How can I change the sysctl kern.securelevel from 2 to -1 without rebooting
> the machine.

You can't.  The whole point of securelevel is that it can *never* be
lowered.

> How do i accomplish this without a reboot, or, if i am going at it all
> wrong, how do i rebuild the kernel of a machine with a kern.securelevel=2?

You can't.  If this is such a problem, don't raise the securelevel.
Also take a look at
http://www.freebsd.org/FAQ/admin.html#KERNEL-CHFLAG-FAILURE.

					Dima Dorfman
					dima@unixfreak.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010106020731.7678E3E02>