From owner-freebsd-questions@FreeBSD.ORG Thu Jan 27 23:55:48 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B3BB016A4CE for ; Thu, 27 Jan 2005 23:55:48 +0000 (GMT) Received: from smtp1.wanadoo.fr (smtp1.wanadoo.fr [193.252.22.30]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6EE2343D5A for ; Thu, 27 Jan 2005 23:55:48 +0000 (GMT) (envelope-from atkielski.anthony@wanadoo.fr) Received: from me-wanadoo.net (funkytiger.co.uk [127.0.0.1]) by mwinf0103.wanadoo.fr (SMTP Server) with ESMTP id 7B9941F92699 for ; Fri, 28 Jan 2005 00:55:47 +0100 (CET) Received: from pix.atkielski.com (ASt-Lambert-111-2-1-3.w81-50.abo.wanadoo.fr [81.50.80.3]) by mwinf0103.wanadoo.fr (SMTP Server) with ESMTP id 639AA1F92692 for ; Fri, 28 Jan 2005 00:55:47 +0100 (CET) X-ME-UUID: 20050127235547408.639AA1F92692@mwinf0103.wanadoo.fr Date: Fri, 28 Jan 2005 00:55:47 +0100 From: Anthony Atkielski X-Priority: 3 (Normal) Message-ID: <208331975.20050128005547@wanadoo.fr> To: freebsd-questions@freebsd.org In-Reply-To: <41F96A35.6090507@calarts.edu> References: <41F96A35.6090507@calarts.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Re: kern secure level help X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: freebsd-questions@freebsd.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Jan 2005 23:55:48 -0000 Sean Murphy writes: SM> what would most of you recommend doing? I've been running at securelevel=3 for years. There are some things that won't work (such as X servers), but not enough to be a problem for me. I've set the system immutable flag on virtually all the binaries as well (not the kernel, though). If I need to rebuild the kernel I reboot as securelevel=-1. -- Anthony