Date: Mon, 09 Oct 2000 12:11:43 -0600 From: Warner Losh <imp@village.org> To: Vivek Khera <khera@kciLink.com> Cc: freebsd-stable@FreeBSD.ORG Subject: Re: make buildworld failing Message-ID: <200010091811.MAA13444@harmony.village.org> In-Reply-To: Your message of "Mon, 09 Oct 2000 10:21:49 EDT." <14817.54397.228468.872440@onceler.kciLink.com> References: <14817.54397.228468.872440@onceler.kciLink.com> <20001008154111.D96958@freebie.demon.nl> <Pine.BSF.4.21.0010090022420.95800-100000@starbug.ugh.net.au>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <14817.54397.228468.872440@onceler.kciLink.com> Vivek Khera writes: : >>>>> "a" == andrew <andrew@ugh.net.au> writes: : : a> On Sun, 8 Oct 2000, Wilko Bulte wrote: : : >> People already having root privs are not stopped by it. Or is it only aimed : >> at the higher securelevels? : : a> I assume its for secure levels 1 and above and if you were a security : a> conscious site I imagine it would be a very useful feature. : : My question is why does /usr/obj need the schg flag set on anything in : the first place? It basically means that on a secure system you have : to reboot to single user just to delete the build tree. Because it installs a subset of the tree in to /usr/obj and that's the standard way that installs happen. I think that you can say make buildworld -DNOFCHG to prevent this. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200010091811.MAA13444>