From owner-freebsd-current Tue May 2 23:16:08 1995 Return-Path: current-owner Received: (from majordom@localhost) by freefall.cdrom.com (8.6.10/8.6.6) id XAA01987 for current-outgoing; Tue, 2 May 1995 23:16:08 -0700 Received: from pluto.ops.NeoSoft.com (root@pluto.ops.NeoSoft.COM [198.64.212.23]) by freefall.cdrom.com (8.6.10/8.6.6) with ESMTP id XAA01981 for ; Tue, 2 May 1995 23:16:05 -0700 Received: from metal.ops.neosoft.com (root@glenn-slip54.nmt.edu [129.138.5.154]) by pluto.ops.NeoSoft.com (8.6.10/8.6.10) with ESMTP id BAA06632; Wed, 3 May 1995 01:15:58 -0500 Received: (from smace@localhost) by metal.ops.neosoft.com (8.6.11/8.6.10) id AAA02440; Wed, 3 May 1995 00:15:53 -0600 From: Scott Mace Message-Id: <199505030615.AAA02440@metal.ops.neosoft.com> Subject: Re: this is nice but... To: bde@zeta.org.au (Bruce Evans) Date: Wed, 3 May 1995 00:15:52 -0600 (MDT) Cc: current@FreeBSD.org, smace@metal-mail.neosoft.com In-Reply-To: <199505030528.PAA28197@godzilla.zeta.org.au> from "Bruce Evans" at May 3, 95 03:28:41 pm X-Mailer: ELM [version 2.4 PL24] Content-Type: text Content-Length: 599 Sender: current-owner@FreeBSD.org Precedence: bulk May we should make some sort of comment about -c/USERCONF? > > >in /etc/rc > > ># snapshot any kernel -c changes back to disk > >echo 'recording kernel -c changes' > >/sbin/dset -q > > > >this is a good feature for newbies I think, but also I think its a > >security problem for systems that want to try and run in a secure env. > > It shouldn't change anything unless the system was booted with -c AND > something was changed. If someone can boot the system with -c then > they can do as much damage as dset anyway. So there should be no > problems except for bugs in dset. > > Bruce >