Date: Fri, 4 Jun 2004 20:11:41 +0200 From: Erik Trulsson <ertr1013@student.uu.se> To: Bill Moran <wmoran@potentialtech.com> Cc: jbronson@wixb.com Subject: Re: security level and fsck Message-ID: <20040604181141.GA66269@falcon.midgard.homeip.net> In-Reply-To: <20040604140036.0a1ef5f0.wmoran@potentialtech.com> References: <6.1.1.1.2.20040604123158.00ab97d0@localhost> <20040604175551.GA66111@falcon.midgard.homeip.net> <20040604140036.0a1ef5f0.wmoran@potentialtech.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jun 04, 2004 at 02:00:36PM -0400, Bill Moran wrote: > Erik Trulsson <ertr1013@student.uu.se> wrote: > > > On Fri, Jun 04, 2004 at 12:32:51PM -0500, J.D. Bronson wrote: > > > is there any connection to fsck not be able to run when > > > I am at security level 3 under 5.2.1? > > > > > > That seems odd, but sure seems to be the case. > > > > That sounds very likely. I would imagine that fsck needs write access > > to the raw disks in order to do its job, but such access is not allowed > > under securelevel 2 and above. > > fsck is normally run very early in the boot-sequence - before the > > securelevel is raised - so in normal operation that would not be any > > major problem. > > What about 5's background fsck? Is that set up so it's able to run after > the securelevel has been raised? Background fsck seems to wait a minute or > so for the machine to boot before it starts. I don't run 5.x so I don't know for sure, but it certainly sounds like background fsck does not work well together with a securelevel 2 or above. So if you want to run at a high securelevel you can't use background fsck. -- <Insert your favourite quote here.> Erik Trulsson ertr1013@student.uu.se
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040604181141.GA66269>