Date: Wed, 17 Oct 2001 12:14:22 +0300 From: Peter Pentchev <roam@ringlet.net> To: Dima Dorfman <dima@unixfreak.org> Cc: doc@FreeBSD.org Subject: Re: [CFR] Handbook doc for installkernel failure at securelevel Message-ID: <20011017121422.A62555@straylight.oblivion.bg> In-Reply-To: <20010718173755.D9EAE3E2F@bazooka.unixfreak.org>; from dima@unixfreak.org on Wed, Jul 18, 2001 at 10:37:55AM -0700 References: <20010718191837.E29731@ringworld.oblivion.bg> <20010718173755.D9EAE3E2F@bazooka.unixfreak.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jul 18, 2001 at 10:37:55AM -0700, Dima Dorfman wrote:
>
> I think this would be better written:
>
> ..tries to remove the immutable flag from your old kernel,
> and set...
>
> since not all kernels are named "kernel".
>
> > + the immutable flag on the new one. Since securelevel 1
> > + or higher prevents changing the immutable flag for any
> ^^^^^^^^^^
>
> This isn't technicall true. You can set schg on files to your heart's
> desire with a raised securelevel; there's no risk in doing that, so
> it's allowed. You just can't lower it. A minor nit, perhaps, but
> it'd be nice if things were accurate.
>
> Other than that, it looks pretty good.
Thanks for your comments.
How about the attached patch?
G'luck,
Peter
--
If you think this sentence is confusing, then change one pig.
Index: doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml
===================================================================
RCS file: /home/ncvs/doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml,v
retrieving revision 1.65
diff -u -r1.65 chapter.sgml
--- doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml 2001/10/08 20:30:48 1.65
+++ doc/en_US.ISO8859-1/books/handbook/kernelconfig/chapter.sgml 2001/10/17 09:17:59
@@ -1206,7 +1206,7 @@
<sect1 id="kernelconfig-trouble">
<title>If Something Goes Wrong</title>
- <para>There are four categories of trouble that can occur when
+ <para>There are five categories of trouble that can occur when
building a custom kernel. They are:</para>
<variablelist>
@@ -1241,6 +1241,23 @@
over your configuration, and if you still cannot resolve the
problem, send mail to the &a.questions; with your kernel
configuration, and it should be diagnosed very quickly.</para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term>Installing the new kernel fails</term>
+
+ <listitem>
+ <para>If the kernel compiled fine, but failed to install
+ (the <command>make install</command> or
+ <command>make installkernel</command> command failed),
+ the first thing to check is if your system is running at
+ securelevel 1 or higher (see &man.init.8;). The kernel
+ installation tries to remove the immutable flag from
+ your kernel and set the immutable flag on the new one.
+ Since securelevel 1 or higher prevents unsetting the immutable
+ flag for any files on the system, the kernel installation needs
+ to be performed at securelevel 0 or lower.</para>
</listitem>
</varlistentry>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-doc" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011017121422.A62555>