From owner-freebsd-security  Sat Jun 19  2:32:17 1999
Delivered-To: freebsd-security@freebsd.org
Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31])
	by hub.freebsd.org (Postfix) with ESMTP id D4F68151D9
	for <freebsd-security@FreeBSD.ORG>; Sat, 19 Jun 1999 02:31:24 -0700 (PDT)
	(envelope-from des@flood.ping.uio.no)
Received: (from des@localhost)
	by flood.ping.uio.no (8.9.3/8.9.1) id LAA81865;
	Sat, 19 Jun 1999 11:31:15 +0200 (CEST)
	(envelope-from des)
To: Greg Black <gjb-freebsd@gba.oz.au>
Cc: Dag-Erling Smorgrav <des@flood.ping.uio.no>,
	Frank Tobin <ftobin@bigfoot.com>, Kirill Nosov <slash@leontief.net>,
	freebsd-security@FreeBSD.ORG
Subject: Re: securelevel descr
References: <Pine.BSF.4.10.9906180326180.55914-100000@srh0710.urh.uiuc.edu>      <xzpu2s5zujv.fsf@flood.ping.uio.no> <19990619042453.7244.qmail@alice.gba.oz.au>
From: Dag-Erling Smorgrav <des@flood.ping.uio.no>
Date: 19 Jun 1999 11:31:15 +0200
In-Reply-To: Greg Black's message of "Sat, 19 Jun 1999 14:24:52 +1000"
Message-ID: <xzpu2s41qqk.fsf@flood.ping.uio.no>
Lines: 16
X-Mailer: Gnus v5.5/Emacs 19.34
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Greg Black <gjb-freebsd@gba.oz.au> writes:
> > > Hrm, that is a excellent idea could be added as an extra securelevel, such
> > > as -2.
> > -2? Why -2? Securelevels are numbered upwards from 0, in increasing
> > order of paranoia.
> Ah, no, they're not.  The init(8) man page is quite clear that
> that are numbered upwards from -1.  For the proposed purpose,
> the -2 value makes some kind of sense.

-1 is just a magic value that tells init not to raise the securelevel
beyond 0. It's not a real securelevel, and is functionally
indistinguishable from securelevel 0.

DES
-- 
Dag-Erling Smorgrav - des@flood.ping.uio.no


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message