From owner-freebsd-current  Thu Oct  3 03:18:37 1996
Return-Path: owner-current
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id DAA19036
          for current-outgoing; Thu, 3 Oct 1996 03:18:37 -0700 (PDT)
Received: from whale.gu.kiev.ua (news.gu.net [193.124.51.77])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id DAA19027
          for <current@freebsd.org>; Thu, 3 Oct 1996 03:18:05 -0700 (PDT)
Received: from creator.gu.kiev.ua (stesin@creator.gu.kiev.ua [193.124.51.73]) by whale.gu.kiev.ua (8.7.5/8.7.3) with SMTP id NAA34786; Thu, 3 Oct 1996 13:13:39 +0300
Date: Thu, 3 Oct 1996 13:13:38 +0300 (EET DST)
From: Andrew Stesin <stesin@gu.net>
X-Sender: stesin@creator.gu.kiev.ua
To: Michael Hancock <michaelh@cet.co.jp>
cc: Garrett Wollman <wollman@lcs.mit.edu>, current@freebsd.org
Subject: Re: Immutable flags (was: Re: WARNING: botched ld.so commit! :-()
In-Reply-To: <Pine.SV4.3.93.961003062342.10892A-100000@parkplace.cet.co.jp>
Message-ID: <Pine.BSI.3.95.961003131028.2552E-100000@creator.gu.kiev.ua>
X-NCC-RegID: ua.gu
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-current@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk


Hello,

On Thu, 3 Oct 1996, Michael Hancock wrote:

> /kernel is marked immutable.  I'd like to be able to configure systems
> such that you can't change the flags unless you are in single user mode
> even if you're root.

	May be the following is dumb...

	What about an append-only / if securelevel > 0 ?

	This way one can create a subtree of appendonly dirs
	with immutable files in them, thus an Immutable Subtree
	in the filesystem.  I think this might be very useful.

> 
> Regards,
> 
> 
> Mike Hancock
> 

	Best,

	Andrew

	nic-hdl: ST73-RIPE