From owner-freebsd-questions@FreeBSD.ORG  Tue Oct 12 05:33:57 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 30F1E16A4CE
	for <freebsd-questions@freebsd.org>;
	Tue, 12 Oct 2004 05:33:57 +0000 (GMT)
Received: from outbox.allstream.net (outbox.allstream.net [207.245.244.41])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EF09943D41
	for <freebsd-questions@freebsd.org>;
	Tue, 12 Oct 2004 05:33:56 +0000 (GMT)
	(envelope-from epilogue@allstream.net)
Received: from localhost (mon-pq56-081.dial.allstream.net [216.123.134.81])
	by outbox.allstream.net (Allstream MTA) with SMTP id 899E857377;
	Tue, 12 Oct 2004 01:33:55 -0400 (EDT)
Date: Tue, 12 Oct 2004 01:33:44 -0400
From: epilogue <epilogue@allstream.net>
To: Chris Collins <z0cool@gmail.com>
Message-Id: <20041012013344.170e8c2d@localhost>
In-Reply-To: <fbf53e700410111703339ee588@mail.gmail.com>
References: <fbf53e700410111703339ee588@mail.gmail.com>
X-Mailer: Sylpheed-Claws 0.9.12 (GTK+ 1.2.10; i386-portbld-freebsd4.10)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
cc: freebsd-questions@freebsd.org
Subject: Re: sysctl kern.securelevel=2
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Oct 2004 05:33:57 -0000

On Mon, 11 Oct 2004 20:03:32 -0400
Chris Collins <z0cool@gmail.com> wrote:

> Hello Alll
> 
> I was wondering what is the best kern.securelevel to run on a machine
> that provides general internet services, Web, FTP and Email. I don't
> want this so tight I cannot use the machine and I have also read in
> some post that having the secure level set to high can stop a fsck.
> 
> I am running  4.8 stable with ipfw and current kern.securelevel at 0.
> After reading the man page I am thinking that I can safely at level 2
> but I am not sure because of this line in the man page "plus disks may
> not be opened for writing (except by mount(2)) whether mounted or not"
>  What exactly does this mean?
> 
> 
> Any help would be appreciated. 

in case you haven't already tried it, you may find 'man securelevel'
helpful.

> Thanks
> Chris
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe@freebsd.org"
>