From owner-freebsd-questions  Tue Jun  5 12:47:21 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from pickup2-ld.pvd.loa.net (pickup.loa.com [199.171.167.59])
	by hub.freebsd.org (Postfix) with SMTP id C4D5637B405
	for <freebsd-questions@FreeBSD.ORG>; Tue,  5 Jun 2001 12:47:16 -0700 (PDT)
	(envelope-from brentb@loa.com)
Received: (qmail 7481 invoked by uid 0); 5 Jun 2001 19:47:10 -0000
Received: from unknown (HELO pretorian) ([208.130.43.221]) (envelope-sender <?>)
          by pickup2-ld.pvd.loa.net (qmail-ldap-1.03) with SMTP
          for <>; 5 Jun 2001 19:47:10 -0000
Message-ID: <005e01c0edf8$3d148080$3ab4a8c0@pretorian>
From: "Brent Bailey" <brentb@loa.com>
To: <freebsd-questions@FreeBSD.ORG>
Subject: kernel -security
Date: Tue, 5 Jun 2001 15:46:39 -0400
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I recently install 4.3 FBSD an i noticed you have the option of picking
"type of security"   i chose "extreme"  and all it really does is add
kern_securelevel="2"
kern_securelevel_enable="YES"

to the /etc/rc.conf  file.....my question is what advantages as far as
security does this offer ??   I also installed IPFW w/ NAT  and a few other
measures to keep unwanted THINGS at bay...

im unclear as to what the kern security offers >??
TIA
thanx
Brent


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message