Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 May 2001 01:07:35 +0100
From:      Steve Peck <steve.peck@uk.easynet.net>
To:        Steve Peck <steve.peck@uk.easynet.net>
Cc:        security@FreeBSD.ORG
Subject:   Re: kernel security level
Message-ID:  <20010510010735.C67755@pavilion.net>
In-Reply-To: <20010509200921.A65710@pavilion.net>; from steve.peck@uk.easynet.net on Wed, May 09, 2001 at 08:09:21PM %2B0100
References:  <20010509200921.A65710@pavilion.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

OK, I've got it all working now :-)))

On Wed, May 09, 2001 at 08:09:21PM +0100, Steve Peck wrote:
> Hi,
> 
> I've installed the FreeBSD 4.3
> 
> And I got this strange problem where the kern.sercurelevel was set to 1.
> 
> I had a version of 4.2 which just defaults to -1.
> 

its set in /etc/rc.conf

> Is this something new? 
>
no
 
> Although it seems like a good idea, I had much trouble finding out why
> I couldn't run X windows. Soon as I found a reference to this /dev/mem
> suddenly was permitted and X started up - but only as root :-(.
> 
> I have since found that I can run X (as root) on kern.securelevel = 0
> But if I set it to this via /etc/sysctl.conf it just gets upgraded to
> level 1! So, I now have it set to level -1 in /etc/sysctl.conf.
> 
> If I did want to run at level 0 then I would have to upgrade it manually
> By loggin in as root and doing 
> # sysctl - w kern.securelevel=0
> every reboot :-(
>
No - just set it in /etc/rc.conf ---see man init
 
> Now, have I done something stangely bad during my install.
>
Yes - messed it all up in /stand/sysinstall
 
> I just ftp'd it from the ftp.uk.FreeBSD.org site. 
> 
> If I try to startx as a user then I now get
> 
> Fatal server error:
> xf86OpeConsole:Server must be suid root
> 
The server (in /etc/X11R6/bin) has to be chmod +s 

Thank you to the people who helped me.

Cheers
Steve


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010510010735.C67755>