Date: Tue, 3 Oct 2000 09:10:24 -0700 (PDT) From: c6re@sdsumus.sdstate.edu To: freebsd-gnats-submit@FreeBSD.org Subject: conf/21729: Using /stand/sysinstall to set security level to "medium" doesn't reduce kern_securelevel in /etc/rc.conf if security level was previously set to "high". Message-ID: <20001003161024.06BE537B66D@hub.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 21729 >Category: conf >Synopsis: Using /stand/sysinstall to set security level to "medium" doesn't reduce kern_securelevel in /etc/rc.conf if security level was previously set to "high". >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Tue Oct 03 09:20:01 PDT 2000 >Closed-Date: >Last-Modified: >Originator: Nathan W. >Release: 4.1.1-RELEASE >Organization: >Environment: FreeBSD Guitarman.SDSTATE.EDU 4.1.1-RELEASE FreeBSD 4.1.1-RELEASE #0 Tue Sep 26 00:46:59 GMT 2000 jkh@narf.osd.bsdi.com:/usr/src/sys/compile/GENERIC i386 >Description: After using /stand/sysinstall to set security level to "high," kern_securelevel="2" is added to /etc/rc.conf. If /stand/sysinstall is later used to set security level to "moderate," kern_securelevel="2" is not overridden, thus the kernel security level remains at 2. >How-To-Repeat: Use /stand/sysinstall to set security level to "high," then use /stand/sysinstall to set security level to "moderate." >Fix: Manually edit /etc/rc.conf to set kern_securelevel to the desired level. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001003161024.06BE537B66D>