From owner-freebsd-current Tue May 2 22:32:31 1995 Return-Path: current-owner Received: (from majordom@localhost) by freefall.cdrom.com (8.6.10/8.6.6) id WAA29939 for current-outgoing; Tue, 2 May 1995 22:32:31 -0700 Received: from godzilla.zeta.org.au (godzilla.zeta.org.au [203.2.228.34]) by freefall.cdrom.com (8.6.10/8.6.6) with ESMTP id WAA29917 for ; Tue, 2 May 1995 22:32:17 -0700 Received: (from bde@localhost) by godzilla.zeta.org.au (8.6.9/8.6.9) id PAA28197; Wed, 3 May 1995 15:28:41 +1000 Date: Wed, 3 May 1995 15:28:41 +1000 From: Bruce Evans Message-Id: <199505030528.PAA28197@godzilla.zeta.org.au> To: current@FreeBSD.org, smace@metal-mail.neosoft.com Subject: Re: this is nice but... Sender: current-owner@FreeBSD.org Precedence: bulk >in /etc/rc ># snapshot any kernel -c changes back to disk >echo 'recording kernel -c changes' >/sbin/dset -q >this is a good feature for newbies I think, but also I think its a >security problem for systems that want to try and run in a secure env. It shouldn't change anything unless the system was booted with -c AND something was changed. If someone can boot the system with -c then they can do as much damage as dset anyway. So there should be no problems except for bugs in dset. Bruce