Date: Sat, 12 Dec 1998 12:06:55 -0800 (PST) From: John Polstra <jdp@polstra.com> To: eivind@yes.no Cc: hackers@FreeBSD.ORG Subject: Re: restricting sysctl -w when securelevel > 0 Message-ID: <199812122006.MAA11452@vashon.polstra.com> In-Reply-To: <19981212151814.S5444@follo.net> References: <199812120642.WAA21633@salsa.gv.tsc.tdk.com>
next in thread | previous in thread | raw e-mail | index | archive | help
In article <19981212151814.S5444@follo.net>,
Eivind Eklund <eivind@yes.no> wrote:
> On Fri, Dec 11, 1998 at 10:42:25PM -0800, Don Lewis wrote:
> >
> > I want to add some security related sysctl knobs and I don't want them
> > to be changeable when securelevel > 0. Rather than using SYSCTL_PROC
> > and defining several very similar handlers, I think it would be better to
> > add a generic way of limiting write access when securelevel > 0.
> >
> > Comments?
>
> I like this concept.
Me too.
John
--
John Polstra jdp@polstra.com
John D. Polstra & Co., Inc. Seattle, Washington USA
"Nobody ever went broke underestimating the taste of the American public."
-- H. L. Mencken
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199812122006.MAA11452>