From owner-freebsd-questions Sat Jul 14 19:56:35 2001 Delivered-To: freebsd-questions@freebsd.org Received: from nebula.anchoragerescue.org (cable-115-7-237-24.anchorageak.net [24.237.7.115]) by hub.freebsd.org (Postfix) with ESMTP id 4A29837B401 for ; Sat, 14 Jul 2001 19:56:31 -0700 (PDT) (envelope-from akbeech@anchoragerescue.org) Received: from galaxy.anchoragerescue.org (galaxy.anchoragerescue.org [24.237.7.95]) by nebula.anchoragerescue.org (Postfix) with SMTP id 35F1E183; Sat, 14 Jul 2001 18:56:30 -0800 (AKDT) Content-Type: text/plain; charset="iso-8859-1" From: Beech Rintoul To: "Noone Here" , questions@freebsd.org Subject: Re: cant chflags noschg /kernel in any mode Date: Sat, 14 Jul 2001 18:56:29 -0800 X-Mailer: KMail [version 1.2] References: In-Reply-To: MIME-Version: 1.0 Message-Id: <01071418562900.71103@galaxy.anchoragerescue.org> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Saturday 14 July 2001 06:27 pm, Noone Here wrote: > i boot to single user mode, but i cant do anything to my kernel. as root i > dont seem to have permission to write or move it. i tried to chmod 755 it, > but cant. > > ls -lo shows /kernel permissions r-xr-xr-x and schg. > > i boot normally,become super user, try chflags noschg /kernel, i get > operation noy permitted. i boot and login as root, same thing. i boot to > single user mode, same thing. i try to chmod, i get "read-only file system" > message. i raise securelevel from single user -1 to 0 and still get same > messages. > > im trying to install MYKERNEL, but make installkernel KERNEL=MYKERNEL fails > because it cant remove this immutable bit and cant mv /kernel -> > /kernel.old. i did a make buildworld, and a make buildkernel > KERNEL=MYKERNEL that worked without error. > > what am i missing or doing wrong here? > > FBSD v.4.3-20010706-STABLE You have your kernel security set too high. Add the following to /etc/rc.conf and reboot: kern_securelevel_enable="YES" # kernel security level (see init(8)), kern_securelevel="-1" # range: -1..3 ; `-1' is the most insecure Beech -- Micro$oft: "Where can we make you go today?" ------------------------------------------------------------------- Beech Rintoul - IT Manager - Instructor - akbeech@anchoragerescue.org /"\ ASCII Ribbon Campaign | Anchorage Gospel Rescue Mission \ / - NO HTML/RTF in e-mail | P.O. Box 230510 X - NO Word docs in e-mail | Anchorage, AK 99523-0510 / \ ----------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message