Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Dec 1998 13:39:28 -0800 (PST)
From:      "Eugene M. Kim" <astralblue@usa.net>
To:        FreeBSD-current Mailing List <freebsd-current@FreeBSD.ORG>
Subject:   Setting securelevel
Message-ID:  <Pine.BSF.4.05.9812281327550.93799-100000@seerajeane.ia.cp>

next in thread | raw e-mail | index | archive | help
Hello,

In init(8) it is said that init can lower the security level, and
src/sbin/init/init.c has the code to lower the security level back to
zero in single-user mode.  However, it doesn't seem that the kernel
allows the security level to be lowered even if init requests it. (See
(rev 1.16 of) src/sys/kern/kern_mib.c around line 130 -- the caller's
pid isn't checked.)

This, in consequence, prohibits the kernel from returning to the
insecure mode even in the single-user mode.

Is this a known problem, or did I miss something?  I tried searching
through the PR database but couldn't find any relevant records.

Thank you,
Eugene


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9812281327550.93799-100000>