From owner-freebsd-stable Mon Oct 9 7:35:39 2000 Delivered-To: freebsd-stable@freebsd.org Received: from peitho.fxp.org (peitho.fxp.org [209.26.95.40]) by hub.freebsd.org (Postfix) with ESMTP id E387037B503 for ; Mon, 9 Oct 2000 07:35:34 -0700 (PDT) Received: by peitho.fxp.org (Postfix, from userid 1501) id 32FCB1360D; Mon, 9 Oct 2000 10:35:40 -0400 (EDT) Date: Mon, 9 Oct 2000 10:35:39 -0400 From: Chris Faulhaber To: Vivek Khera Cc: freebsd-stable@freebsd.org Subject: Re: make buildworld failing Message-ID: <20001009103539.B28702@peitho.fxp.org> Mail-Followup-To: Chris Faulhaber , Vivek Khera , freebsd-stable@freebsd.org References: <20001008154111.D96958@freebie.demon.nl> <14817.54397.228468.872440@onceler.kciLink.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <14817.54397.228468.872440@onceler.kciLink.com>; from khera@kciLink.com on Mon, Oct 09, 2000 at 10:21:49AM -0400 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, Oct 09, 2000 at 10:21:49AM -0400, Vivek Khera wrote: > >>>>> "a" == andrew writes: > > a> On Sun, 8 Oct 2000, Wilko Bulte wrote: > > >> People already having root privs are not stopped by it. Or is it only aimed > >> at the higher securelevels? > > a> I assume its for secure levels 1 and above and if you were a security > a> conscious site I imagine it would be a very useful feature. > > My question is why does /usr/obj need the schg flag set on anything in > the first place? It basically means that on a secure system you have > to reboot to single user just to delete the build tree. > It doesn't (as of 4.x). Previous branches did set the schg flag, however 4.x and 5.x no longer do this. -- Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message