Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Sep 2001 15:58:05 -0300 (ART)
From:      Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
To:        Eric Thern <eric@zoidial.com>
Cc:        <freebsd-security@FreeBSD.ORG>
Subject:   Re: Kernel-loadable Root Kits < securelevel >
Message-ID:  <20010909153307.V4633-100000@cactus.fi.uba.ar>
In-Reply-To: <20010909.18312775@mis.configured.host>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 9 Sep 2001, Eric Thern wrote:

>
> 	Is there any possibility of having console be able to lower the
> securelevel without rebooting?  In a situation with dedicated or
> colocated servers where only one person has console access, it would sure
> be a wonderful thing, although I'm fairly certain there is some security
> loophole in that whole mess.

If you have DDB enabled in your kernel, you can break to it and lower
the securelevel from the debuger. Leave ddb, do whatever you have to do
then raise your securelevel again.


			Fer

>
>
> -Eric
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010909153307.V4633-100000>