From owner-freebsd-questions@FreeBSD.ORG Wed Oct 1 10:55:21 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E7F031065690 for ; Wed, 1 Oct 2008 10:55:21 +0000 (UTC) (envelope-from juancr@dsa.es) Received: from llca513-a.servidoresdns.net (llca513-a.servidoresdns.net [217.76.128.120]) by mx1.freebsd.org (Postfix) with ESMTP id A69528FC16 for ; Wed, 1 Oct 2008 10:55:21 +0000 (UTC) (envelope-from juancr@dsa.es) Received: from mail.dsa.es (localhost.localdomain [127.0.0.1]) by llca513-a.servidoresdns.net (Postfix) with ESMTP id AC20A1104045 for ; Wed, 1 Oct 2008 12:34:07 +0200 (CEST) Received: from 217.114.136.134 (SquirrelMail authenticated user faf352c) by mail.dsa.es with HTTP; Wed, 1 Oct 2008 10:34:07 -0000 (GMT) Message-ID: <54674.217.114.136.134.1222857247.squirrel@mail.dsa.es> Date: Wed, 1 Oct 2008 10:34:07 -0000 (GMT) From: "DSA - JCR" To: freebsd-questions@freebsd.org User-Agent: SquirrelMail/1.4.10a MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Subject: Securing system with kern.securelevel X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Oct 2008 10:55:22 -0000 HI to all FreeBSD 6.3 i386 I would like to use securelevel to secure a backup schedluded box made with FreeBSD. This box mount and unmount external USB disk where the backup is made once a week. Which would be the correct secure level ? 1, 2, or 3? I don't want nobody modify scripts and root things, like adding a user to make the thing by itself, ... or modify my crontab scripts, etc... Also, where i must put the kern.securelevel? I didnt understood very well in the manual and handbook in which part of the bootin process (rc) i must put the line in rc.conf? Thanks in advance Juan Coruņa Desarrollo de Software Atlantico