Date: Tue, 26 Mar 2002 15:53:02 +0100 From: Miguel Mendez <flynn@energyhq.homeip.net> To: Moti Levy <moti@flncs.com> Cc: security@freebsd.org Subject: Re: secure levels question . Message-ID: <20020326155302.A26448@energyhq.homeip.net> In-Reply-To: <02f001c1d4d3$8ae70b30$fd6e34c6@moti>; from moti@flncs.com on Tue, Mar 26, 2002 at 09:35:56AM -0500 References: <02f001c1d4d3$8ae70b30$fd6e34c6@moti>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Mar 26, 2002 at 09:35:56AM -0500, Moti Levy wrote:
Hi,
> Hi ,
> I'm building a new mail relay for my company ( it was a hard fight but
> freebsd won ! )
> i figured I can set secure level 1 but not two since a mail server needs
> access to write on disks .
> am i right ?
No, I run my mail server at level 3. What you cannot do when running at
high security levels is write to the raw disk, you still can write data
to normal files, just not to the device.
That's the reason why you can't use newfs once your securelevel is set
to 2.
Cheers,
--=20
Miguel Mendez - flynn@energyhq.homeip.net
GPG Public Key :: http://energyhq.homeip.net/files/pubkey.txt
EnergyHQ :: http://www.energyhq.tk
FreeBSD - The power to serve!
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020326155302.A26448>