From owner-freebsd-questions@FreeBSD.ORG  Fri Jul 22 08:01:47 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id CD90416A42A
	for <freebsd-questions@freebsd.org>;
	Fri, 22 Jul 2005 08:01:47 +0000 (GMT) (envelope-from NKoch@demig.de)
Received: from server.absolute-media.de (server.absolute-media.de
	[213.239.231.9])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0054B43D7D
	for <freebsd-questions@freebsd.org>;
	Fri, 22 Jul 2005 08:01:32 +0000 (GMT) (envelope-from NKoch@demig.de)
Received: from localhost (unknown [127.0.0.1])
	by server.absolute-media.de (Postfix) with ESMTP id EDEBD8BD30;
	Fri, 22 Jul 2005 10:01:26 +0200 (CEST)
Received: from server.absolute-media.de ([127.0.0.1])
	by localhost (server [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
	id 15069-01; Fri, 22 Jul 2005 10:01:22 +0200 (CEST)
Received: from firewall.demig (p5083958F.dip0.t-ipconnect.de [80.131.149.143])
	by server.absolute-media.de (Postfix) with ESMTP id A5B068BD45;
	Fri, 22 Jul 2005 10:01:17 +0200 (CEST)
Received: from ws-ew-3 (ws-ew-3.w2kdemig [192.168.1.72])
	by firewall.demig (8.13.4/8.13.1) with SMTP id j6M7wtAw007676;
	Fri, 22 Jul 2005 09:58:55 +0200 (CEST) (envelope-from NKoch@demig.de)
From: "Norbert Koch" <NKoch@demig.de>
To: <Axel.Gruner@suedfactoring.de>, <freebsd-questions@freebsd.org>
Date: Fri, 22 Jul 2005 09:58:54 +0200
Message-ID: <000001c58e93$34b5e600$4801a8c0@ws-ew-3.W2KDEMIG>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
Importance: Normal
In-Reply-To: <OF90800755.61F0F06C-ONC1257046.0028C8B2-C1257046.0028C8B6@suedfac.com>
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2120.0
X-Virus-Scanned: by amavisd-new
X-Virus-Scanned: by amavisd-new at absolute-media.de
Cc: 
Subject: RE: Strange securelevel
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Jul 2005 08:01:48 -0000

> Hi,
>
> after playing a bit with "securelevel" i found a very strange one (well, i
> thought there will be just -1, 0, 1, 2 and 3). But look at this:
>
> #sysctl kern.securelevel
> kern.securelevel: 2147483647
>
> Thats the highest securelevel i found on my FreeBSD 5.4-RELEASE.
> So, whatr does it mean? Getting electro shocks when touching the mouse
> and/or keyboard?
> And, the man page ha to be rewritten, to explain the rest of the
> 2147483644
> securelevel.
>
> No, serious, is this a bug, or what?

Well, that's 0x7FFFFFFF.
That means a little less than 2^31 securelevels to document.
And I'm expecting this to be about 2^63 for 64 bit systems ;-)

Someone please correct me if I'm wrong, but as I understand
sysctl_kern_securelvl() in kern_mib.c, it does not disallow
setting the securelevel so high. It only disallows to lower it.

Norbert