From owner-freebsd-questions Sat Sep 21 3: 9:24 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CAB5A37B401 for ; Sat, 21 Sep 2002 03:09:22 -0700 (PDT) Received: from lurza.secnetix.de (lurza.secnetix.de [212.66.1.130]) by mx1.FreeBSD.org (Postfix) with ESMTP id 01C4343E4A for ; Sat, 21 Sep 2002 03:09:22 -0700 (PDT) (envelope-from olli@lurza.secnetix.de) Received: from lurza.secnetix.de (localhost [IPv6:::1]) by lurza.secnetix.de (8.12.5/8.12.5) with ESMTP id g8LA9JmC079440 for ; Sat, 21 Sep 2002 12:09:20 +0200 (CEST) (envelope-from oliver.fromme@secnetix.de) Received: (from olli@localhost) by lurza.secnetix.de (8.12.5/8.12.5/Submit) id g8LA9JCX079439; Sat, 21 Sep 2002 12:09:19 +0200 (CEST) Date: Sat, 21 Sep 2002 12:09:19 +0200 (CEST) Message-Id: <200209211009.g8LA9JCX079439@lurza.secnetix.de> From: Oliver Fromme To: freebsd-questions@FreeBSD.ORG Reply-To: freebsd-questions@FreeBSD.ORG Subject: Re: time off by 30 minutes In-Reply-To: <3D8BE28A.5000205@owt.com> X-Newsgroups: list.freebsd-questions User-Agent: tin/1.5.4-20000523 ("1959") (UNIX) (FreeBSD/4.6-STABLE (i386)) MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Kent Stewart wrote: > Len Conrad wrote: > > Any way to change the SL without rebooting, it's a busy mail gateway? > > or otherwise to override this override? > > You might be able to just drop to single user mode and set the time. No, the security-level is not lowered when you drop to single-user mode, and the kernel still enforces all the restrictions. > Changing the kern_securelevel requires rebooting. Well ... :-) If you have DDB (the kernel debugger) enabled in your kernel, then you can press Ctrl-Alt-Esc on the console (or send a Break signal if you have a serial console). At the DDB prompt, type: write securelevel 1 continue Of course, that still means you have a short downtime, because the services are unavailable while you're in DDB. But that's only a few seconds -- A full reboot would take much longer. Regards Oliver -- Oliver Fromme, secnetix GmbH & Co KG, Oettingenstr. 2, 80538 München Any opinions expressed in this message may be personal to the author and may not necessarily reflect the opinions of secnetix in any way. "All that we see or seem is just a dream within a dream" (E. A. Poe) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message