Date: Wed, 6 Jun 2001 07:38:20 -0400 (EDT) From: "Ian P. Thomas" <ipthomas_77@yahoo.com> To: neil@darlow.co.uk (Neil Darlow) Cc: freebsd-questions@freebsd.org Subject: Re: Disabling kern.securelevel? Message-ID: <200106061138.HAA00505@scarlet.my.domain> In-Reply-To: <20010606.11174600@ideal.darlow.co.uk> from Neil Darlow at "Jun 6, 2001 11:17:46 am"
next in thread | previous in thread | raw e-mail | index | archive | help
I ran into the same issue. It's good that a higher secure level changing certain files(example the kernel) impossible, but if it is your own box, then this can really get in the way if you recompile your kernel often. Two solutions, possibly(for kernels that is). Boot into single user and then back into the system after commenting out the appropriate comments in rc.conf. This is much faster than a full reboot. Move the new kernel you compiled into the / directory by hand and give it another descriptive name. You would have to reboot to use it anyway, but at least you should be able to leave the secure level alone. I havn't tried the last one but it seems plausible. Good luck. Ian In the last episode, Neil Darlow stated... [Charset ISO-8859-1 unsupported, filtering to ASCII...] > Hi, > > I understand the benefits of running with kern.securelevel > 0 but > I am finding that it gets in the way when applying patches. > > Is there any way, other than reboot, to change kern.securelevel back > to 0? > > I've been doing some security updates recently and I've had to do > the following: > > 1) Disable securelevel in /etc/rc.conf > 2) Reboot > 3) Install patches (for files with schg set) > 4) Enable securelevel in /etc/rc.conf > 5) Reboot > > Two reboots seems excessive. I can understand the need to do one if > libc or the kernel has been updated. > > Is there another way? > > Regards, > Neil Darlow. > > -- > 1024D/531F9048 1999-09-11 Neil Darlow <neil@darlow.co.uk> > Key fingerprint = 359D B8FF 6273 6C32 BEAA 43F9 E579 E24A 531F 9048 > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200106061138.HAA00505>