From owner-freebsd-stable@FreeBSD.ORG  Thu Sep  9 16:44:13 2010
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id A44AA10656EA
	for <stable@freebsd.org>; Thu,  9 Sep 2010 16:44:13 +0000 (UTC)
	(envelope-from pi@opsec.eu)
Received: from home.opsec.eu (home.opsec.eu [IPv6:2001:14f8:200::1])
	by mx1.freebsd.org (Postfix) with ESMTP id 6175D8FC08
	for <stable@freebsd.org>; Thu,  9 Sep 2010 16:44:13 +0000 (UTC)
Received: from pi by home.opsec.eu with local (Exim 4.72 (FreeBSD))
	(envelope-from <pi@opsec.eu>) id 1OtkEQ-000D4j-TG
	for stable@freebsd.org; Thu, 09 Sep 2010 18:44:14 +0200
Date: Thu, 9 Sep 2010 18:44:14 +0200
From: Kurt Jaeger <pi@opsec.eu>
To: stable@freebsd.org
Message-ID: <20100909164414.GI34314@home.opsec.eu>
References: <AANLkTikvd09fw3fUhxsXDhMoWE-kvMoPjXPSTfzYY73T@mail.gmail.com>
	<20100909125400.GA18723@lordcow.org>
	<20100909131340.GA75829@icarus.home.lan>
	<20100909132519.GB21535@lordcow.org>
	<20100909140224.GA76889@icarus.home.lan>
	<20100909142226.GA25370@lordcow.org>
	<20100909142455.GA77677@icarus.home.lan>
	<20100909142928.GA25877@lordcow.org>
	<20100909143357.GG34314@home.opsec.eu>
	<AANLkTi=XqVaAWxuZJ39mK4hYpg6+m04tzN9jsJ7scTD-@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <AANLkTi=XqVaAWxuZJ39mK4hYpg6+m04tzN9jsJ7scTD-@mail.gmail.com>
Cc: 
Subject: Re: MSIX failure
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Sep 2010 16:44:13 -0000

Hi!

> > Basically, when the securelevel is positive, the kernel restricts
> > certain tasks; not even the superuser (i.e., root) is allowed to
> > do them.

> OH YUCK, another root isn't really root, so is it also possibly
> the reason for the MSIX failure?? Is this pile, er feature, on by default?

No, not by default.

-- 
pi@opsec.eu            +49 171 3101372                        10 years to go !