From owner-freebsd-current Thu Sep 7 9:33:58 2000 Delivered-To: freebsd-current@freebsd.org Received: from mail2.netcologne.de (mail2.netcologne.de [194.8.194.103]) by hub.freebsd.org (Postfix) with ESMTP id BFDA437B422 for ; Thu, 7 Sep 2000 09:33:50 -0700 (PDT) Received: from bagabeedaboo.security.at12.de (dial-213-168-64-75.netcologne.de [213.168.64.75]) by mail2.netcologne.de (8.9.3/8.9.3) with ESMTP id SAA06650; Thu, 7 Sep 2000 18:33:33 +0200 (MET DST) Received: from localhost (localhost.security.at12.de [127.0.0.1]) by bagabeedaboo.security.at12.de (8.11.0/8.11.0) with ESMTP id e87GXKe01107; Thu, 7 Sep 2000 18:33:20 +0200 (CEST) (envelope-from pherman@frenchfries.net) Date: Thu, 7 Sep 2000 18:33:20 +0200 (CEST) From: Paul Herman To: freebsd-current@freebsd.org Cc: Vivek Khera Subject: call for testers: init securelevel patch Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, Here is a patch which will allow init(8) (or rather, any process with PID 1) to lower the securelevel to 0 when going into single-user maintenence mode. This has no effect if securelevel is -1. Feedback welcome -- there may be security implications I'm not aware of. If this is well recieved, I will tack it onto bin/20974 for further review and commit into -CURRENT. -Paul. begin 644 init_securelevel.patch.gz M'XL(")&]MSD"`VEN:71?G%V^[@[T) MT^.U9=XZW0;"%B_!0=M.51,LN-]VIX/)!$D'?]RZ>#ELN;EK*_3C"J1:%@3/ MGR%C9*GB77(:MWY1C@NAG9SZ@W0P2I.C#^4TWB6G?OKIA9R.ATY-;,=>2_%5 M%3#/SROBS3+ETJYXCEHCEXL%:5*VX