Date: Tue, 9 Jan 2001 11:51:59 +0100 From: Matjaz Martincic <matjaz.martincic@hermes.si> To: "'Rasputin'" <rasputin@FreeBSD-uk.eu.org>, freebsd-security@FreeBSD.ORG Subject: RE: Running X in securelevels > 0 ? Message-ID: <EA63CEA50DF8D311ABAD00B0D0211732211A94@hal9000.hermes.si>
next in thread | raw e-mail | index | archive | help
Had the same problem. I somehow managed to bypass it by creating the shell
script that first run the Xserver and then change the securelevel with
sysctl. And it worked. But the problem is that the securelevel is not
changed at boot time :(, so you have to run X to set it first.
rgds,
Matjaz
______________________________________
OmniBack Quality Assurance Team
Matjaz Martincic
HERMES SoftLab Storage & Data Management
Litijska 51 tel: +386 61 1865 338
Ljubljana SI-1000 fax: +386 61 1865 270
Slovenia E-mail: matjaz.martincic@hermes.si
______________________________________
-----Original Message-----
From: Rasputin [mailto:rasputin@FreeBSD-uk.eu.org]
Sent: Tuesday, January 09, 2001 10:47 AM
To: freebsd-security@FreeBSD.ORG
Subject: Running X in securelevels > 0 ?
Morning all and Happy New Year.
Has anyone managed to get X working in securelevel 1?
I get errors when it tries to open /dev/io, which isn't that surprising
(from man init):
" 1 Secure mode - the system immutable and system append-only flags
may
not be turned off; disks for mounted filesystems, /dev/mem, and
/dev/kmem may not be opened for writing; kernel modules (see
kld(4)) may not be loaded or unloaded."
But I was talking to an OpenBSD user over the weekend who said that 2.7
somehow
manages to reserve access to certsain devices by running some kind of
wrapper before
the securelevel is used (although that may be bull).
Has anybody managed this, or have any references for the OpenBSD way of
doing it?
Thanks.
--
Rasputin
Jack of All Trades :: Master of Nuns
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?EA63CEA50DF8D311ABAD00B0D0211732211A94>