Date: Tue, 7 Sep 1999 15:06:02 +1000 From: Peter Jeremy <jeremyp@gsmx07.alcatel.com.au> To: dillon@apollo.backplane.com Cc: freebsd-hackers@FreeBSD.ORG, freebsd-security@FreeBSD.ORG Subject: Re: Init(8) cannot decrease securelevel Message-ID: <99Sep7.150409est.40326@border.alcanet.com.au> In-Reply-To: <199909070420.VAA77483@apollo.backplane.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Matthew Dillon <dillon@apollo.backplane.com> wrote: > If the system winds up in a state where a kernel core cannot be > generated, DDB is the only way to figure out what is going on. > securelevel is a mechanism which attempts to guarentee data security, > at least to a degree. The problem is that DDB currently allows too much freedom. It needs to disable various commands as the securelevel is raised. Working out which commands is the non-trivial exercise - especially since you can add new ones with DB_COMMAND(). Peter To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?99Sep7.150409est.40326>