Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Jul 1996 13:43:28 -0600
From:      Sean Kelly <kelly@fsl.noaa.gov>
To:        mcnab@bayarea.net
Cc:        black@MR.Net, questions@FreeBSD.ORG
Subject:   Re: can't delete rcp
Message-ID:  <199607161942.TAA28545@gatekeeper.fsl.noaa.gov>
In-Reply-To: <199607161817.LAA03277@baygate.bayarea.net> (message from David McNab on Tue, 16 Jul 1996 11:17:37 -0700)

next in thread | previous in thread | raw e-mail | index | archive | help
>>>>> "David" == David McNab <mcnab@bayarea.net> writes:

    David> What is the rationale behind it, and where did it come
    David> from?

Oh, and there's a good discussion on security levels and what they do
in init(1).  For example:

     1     Secure mode - immutable and append-only flags may not be changed;
           disks for mounted filesystems, /dev/mem, and /dev/kmem are read-
           only.

so that's another reason to use chflags on sensitive files.

You might even want to go as far as setting immutable on all
distribution media files, like /usr/bin/*.

Be careful out there!

-- 
Sean Kelly                          
NOAA Forecast Systems Laboratory    kelly@fsl.noaa.gov
Boulder Colorado USA                http://www-sdd.fsl.noaa.gov/~kelly/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199607161942.TAA28545>