From owner-freebsd-security Wed Sep 17 09:45:45 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id JAA23953 for security-outgoing; Wed, 17 Sep 1997 09:45:45 -0700 (PDT) Received: from gatekeeper.fsl.noaa.gov (gatekeeper.fsl.noaa.gov [137.75.131.181]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id JAA23945 for ; Wed, 17 Sep 1997 09:45:41 -0700 (PDT) Received: from cardinal.fsl.noaa.gov (daemon@cardinal.fsl.noaa.gov [137.75.60.101]) by gatekeeper.fsl.noaa.gov (8.8.5/8.8.5) with ESMTP id QAA28819; Wed, 17 Sep 1997 16:45:32 GMT Received: from fsl.noaa.gov (auk.fsl.noaa.gov) by cardinal.fsl.noaa.gov with ESMTP (1.40.112.3/16.2) id AA208614732; Wed, 17 Sep 1997 16:45:32 GMT Message-Id: <3420092B.7B59AA48@fsl.noaa.gov> Date: Wed, 17 Sep 1997 10:45:31 -0600 From: Sean Kelly Organization: CIRA/NOAA X-Mailer: Mozilla 4.02b7 [en] (X11; I; HP-UX B.10.20 9000/725) Mime-Version: 1.0 To: Frode Nordahl , security@freebsd.org Subject: Re: schg flag... References: <199709171620.SAA25313@login.bigblue.no> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk The schg flag can't be changed when the system is running in securelevel 1 or 2. See init(1) for more details. According to that man page, the securelevel is usually set in /etc/rc during bootup. A quick grep through /etc/* doesn't contain any reference to securelevel, though. You could probably add it yourself to your own rc files, but it'd be nice if there were an /etc/rc.conf entry for it. --Sean