From owner-freebsd-questions  Tue Jul 17  4:57:39 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from hades.hell.gr (patr530-a074.otenet.gr [212.205.215.74])
	by hub.freebsd.org (Postfix) with ESMTP id A822A37B403
	for <freebsd-questions@freebsd.org>; Tue, 17 Jul 2001 04:57:35 -0700 (PDT)
	(envelope-from keramida@ceid.upatras.gr)
Received: by hades.hell.gr (Postfix, from userid 1001)
	id 4DDA42CA; Tue, 17 Jul 2001 14:02:13 +0300 (EEST)
Date: Tue, 17 Jul 2001 14:02:12 +0300
From: Giorgos Keramidas <keramida@ceid.upatras.gr>
To: Mark <mlivingstone@ottawa.com>
Cc: freebsd-questions@freebsd.org
Subject: Re: how to change SECURELEVEL back?
Message-ID: <20010717140212.B1079@hades.hell.gr>
References: <20010716222645.A19000@tmd.df.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010716222645.A19000@tmd.df.ru>; from mlivingstone@ottawa.com on Mon, Jul 16, 2001 at 10:26:45PM -0400
X-PGP-Fingerprint: 3A 75 52 EB F1 58 56 0D - C5 B8 21 B6 1B 5E 4A C2
X-URL: http://students.ceid.upatras.gr/~keramida/index.html
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

From: Mark <mlivingstone@ottawa.com>
Subject: how to change SECURELEVEL back?
Date: Mon, Jul 16, 2001 at 10:26:45PM -0400

> 
> re,
> 
> how do go about changing securelevel from 2 back to 0 or -1? :) i've
> changed it using "sysctl" but appears i can't change it back..
> 
> reply to e-mail please.
> 
> thank you in advance!

On a running system, you can only raise the securelevel.
You can't drop it lower.

If you haven't changed the kern_securelevel variable in /etc/rc.conf,
a simple reboot will bring securelevel back to -1.

If you have edited /etc/rc.conf and changed kern_securelevel to
something higher than -1, you will need to boot in single user mode,
mount the root filesystem as read-write and edit /etc/rc.conf to
remove (or comment) the offending line.  Then go multiuser as usual.

-giorgos

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message