From owner-freebsd-stable@FreeBSD.ORG Thu Sep 9 16:41:52 2010 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A0D8910656AB for ; Thu, 9 Sep 2010 16:41:52 +0000 (UTC) (envelope-from jfvogel@gmail.com) Received: from mail-ww0-f42.google.com (mail-ww0-f42.google.com [74.125.82.42]) by mx1.freebsd.org (Postfix) with ESMTP id 2D94B8FC16 for ; Thu, 9 Sep 2010 16:41:51 +0000 (UTC) Received: by wwd20 with SMTP id 20so125645wwd.1 for ; Thu, 09 Sep 2010 09:41:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=6lKwIRaFAmBD4+qWY5N+ci7VxIP6aT0zGYYUg3r+DFs=; b=o/+WpqEmPWtXRoaqVg6Hb+7qZdl/N9WboHIwIQ5mp1NakrLEVTOH6wYpwe9jDnnIN9 pQzELSrfI5r4YJC0jOpcdMy/tWSQKgZdZPw1PF/wzCxGPWIm5lUaIbfxaxNYz3hmVhwO oc1yZnZ2pGLd6ADiG+/dVXHSPdUKhH1iwr20g= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=scQHArfPrqBdsJbKR8bPU4JqKC5HWyiIQfQZ48v8efXcXFedqMo3gTrMhfRM8DIdCz v5YR6j+7aoWNCZKDXrRFNB/Ou/skRQN8gwiqKEBeye0ULOmybl563FZGlV1YmmyKhO8+ jfpadH+Srt3WpJNboGHe6OlaIzWPubaIGDPsg= MIME-Version: 1.0 Received: by 10.227.157.84 with SMTP id a20mr24885wbx.32.1284050468146; Thu, 09 Sep 2010 09:41:08 -0700 (PDT) Received: by 10.216.49.78 with HTTP; Thu, 9 Sep 2010 09:41:07 -0700 (PDT) In-Reply-To: <20100909143357.GG34314@home.opsec.eu> References: <20100908094050.GA73841@lordcow.org> <20100909125400.GA18723@lordcow.org> <20100909131340.GA75829@icarus.home.lan> <20100909132519.GB21535@lordcow.org> <20100909140224.GA76889@icarus.home.lan> <20100909142226.GA25370@lordcow.org> <20100909142455.GA77677@icarus.home.lan> <20100909142928.GA25877@lordcow.org> <20100909143357.GG34314@home.opsec.eu> Date: Thu, 9 Sep 2010 09:41:07 -0700 Message-ID: From: Jack Vogel To: Kurt Jaeger Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Gareth de Vaux , stable@freebsd.org Subject: Re: MSIX failure X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Sep 2010 16:41:52 -0000 On Thu, Sep 9, 2010 at 7:33 AM, Kurt Jaeger wrote: > Hi! > > > > Is this within a jail or something else along those lines? I can't > > > reproduce the problem otherwise. Frustrating! Someone else on the > list > > > might have ideas as to what could cause this. > > > > Nope, this's a normal host. I've got securelevel on 1, but doubt that > > would affect this? > > I assume it affects it. > > http://www.freebsd.org/doc/en/books/faq/security.html#SECURELEVEL > > Basically, when the securelevel is positive, the kernel restricts > certain tasks; not even the superuser (i.e., root) is allowed to > do them. > > There: > > # Write to kernel memory via /dev/mem and /dev/kmem. > > So I assume it also restricts reading /dev/kmem ? > > OH YUCK, another root isn't really root, so is it also possibly the reason for the MSIX failure?? Is this pile, er feature, on by default? Jack