Date: Mon, 13 Jan 2003 12:39:16 +0100 From: Pawel Jakub Dawidek <nick@garage.freebsd.pl> To: Bruce Evans <bde@zeta.org.au> Cc: Matthew Dillon <dillon@apollo.backplane.com>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c Message-ID: <20030113113916.GL9430@garage.freebsd.pl> In-Reply-To: <20030113222917.C12128-100000@gamplex.bde.org> References: <20030113082610.GH9430@garage.freebsd.pl> <20030113222917.C12128-100000@gamplex.bde.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--Zi0sgQQBxRFxMTsj
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Mon, Jan 13, 2003 at 10:31:27PM +1100, Bruce Evans wrote:
+> % Lock the sysctl(8) knobs that turn ip{,6}fw(8) firewalling and
+> % firewall logging on and off when at elevated securelevel(8). It would
+> % be nice to be able to only lock these at securelevel >=3D 3, like rules
+> % are, but there is no such functionality at present. I don't see reason
+> % to be adding features to securelevel(8) with MAC being merged into 5.0.
No such functionality? s/SYSCTL_INT/SYSCTL_PROC/ ?
--=20
Pawel Jakub Dawidek
UNIX Systems Administrator
http://garage.freebsd.pl
Am I Evil? Yes, I Am.
--Zi0sgQQBxRFxMTsj
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)
iQCVAwUBPiKlZD/PhmMH/Mf1AQHgWwP9GbcEvdeN3dmpqr5eKefMzodoy0fMJlkv
jxcaZZhm5xpVV7KAJmoeuxghBTgc0qGLNH176LYCRfS5p7hWATuR7ZxnI0jf/NX7
Yho/z+9Wl6f6hUI/DH0BZV6/HDVZK3biBn5XL6XvXmUTJ5cIH9SfDl2Mb4kruzJP
/EgOKwNXFVE=
=pbBk
-----END PGP SIGNATURE-----
--Zi0sgQQBxRFxMTsj--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030113113916.GL9430>