Date: Fri, 15 Sep 2000 11:19:17 +0200 (CEST) From: Paul Herman <pherman@frenchfries.net> To: freebsd-hackers@FreeBSD.ORG Subject: init(8) and securelevel Message-ID: <Pine.BSF.4.21.0009151100150.323-101000@bagabeedaboo.security.at12.de>
next in thread | raw e-mail | index | archive | help
This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --0-1161302707-969008466=:323 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII Content-ID: <Pine.BSF.4.21.0009151101181.323@bagabeedaboo.security.at12.de> After some thought about init(8) and securelevel (and a suggestion from Sheldon Hearn) I believe a good compromise is to have the whole "init(8) being able to lower the securelevel in single-user mode" behaviour a boot variable in /boot/loader.conf. This has the advantage of giving people who wish to lower the secure level in maintenence mode what they want, without changing the default behavior of FreeBSD. Attached is a patch against -CURRENT from a few days ago (don't know if it patches cleanly against -STABLE.) Feedback welcome (for example, I'm not so happy with the boot variable name...) -Paul. --0-1161302707-969008466=:323 Content-Type: APPLICATION/OCTET-STREAM; NAME="init_securelevel.patch.gz" Content-Transfer-Encoding: BASE64 Content-ID: <Pine.BSF.4.21.0009151101060.323@bagabeedaboo.security.at12.de> Content-Description: Content-Disposition: ATTACHMENT; FILENAME="init_securelevel.patch.gz" H4sICBvkwTkCA2luaXRfc2VjdXJlbGV2ZWwucGF0Y2gAvVhhc+I4Ev1s/4q+ bNUEgg02kAScy9YkGWY2tRkyFbJ7d584YwtQxdicJMNkd+e/X7dkE+OErau6 2qGIcazup5b0+qnl2zRmXwOQz7IzyzLVmWdCLTtJFsZMtKMsnduX///HfriZ wJwnLIDOMluxThptZEeKqHO4X2djC6YEZxueLkDgj+RZCn6717NjPp+Dm4Pb A1fQE6gG7Lrun4zH6nqe1/GGHd8DvxecDvBradRWq/U/+XXBPw08P/BO7ffv wT3rOmfQwus5vH9vww/kPpUYdMIuj8b3R9YPMFGhUISt2Ap4CqbVzSUTsMpi VnrRA+qLL0rPhzyFJyZSlhxL9FRMhJHiGwYxTkjEwFjnIlQ0OWuRLUS4KuE2 TMwyuYviJkR8CeyrEiH6z/LFgqaWpzjWlQFQGcwYwlBPsd0yMMlWTCWLkk1S Il0lSbaleLgiF8HiHGNBm1ywhG1YcmCQ5DBdh2p5edSRM5526EFgbrPKPd22 Z+ET/qvCNCaW8BRvk+TIBsuiGWVKgloySLhUkM1NLBEa8zhUTNpg39aYzXuD s07CZ/qXntDA29F34veB3g+yvHtWZ3n3DCpR75H8AHhB2UHH64E3DPw+stbS 0HtU/3NvQ/h+cNoLfF8T/rRHhMerITx9fj/STFnEsyPHeriefvpw/c3ZazJs MK2T2/Gnu1HNoCCrsfh19HB9PyGTVsXkhYjG6u4fD5O7X+92QONf7u4cy/tm w7eLfQJQCmlWTVchT7/Hotd7PLjQfv+VnuEjqAZbrnUdsy5luEhdyyCWC3zY xSzqWdD19KIOtYoNSxWTSuSRslBQIjghf7qjSSURgmgVyie4hJvPV5OfL+wW Sgr2A6YtTKeoDqxcKnQyzZbBBC0IJ4TnrcM4Fhq16G+TolDAicDV3qwvDNu8 c003b+AMdWiWxefQIEIssy2qzzvYUaoJv2t9aGwyHjdlPntWrOG6ebR24Fge Ny90a7YmrZMYv4+xW9Y3uryBWdCLQNHAqg/M+AP5o7LNYzaHNFPPTBk2Vj9v gH+8mjxe398/EnqdqHSZrvjsu/H0pcPDu+75q133HCqB7nH05XnBt/OO1wff D7qnQZcoimh7DH3lsCPoedDtax74Z1p26OdFd/DjOfRFpEgl02UmVRqumANH V0d4+an4/6i54251l7pEWKTAW7TFNu/C6pxAuL/XxSwSLJT7u91Jx3AYN9GI OrHLePS4CstN0pj8a3LzeDf96Wr84W70ML16+DRpmsGd06ha/nnfGRQkZ0Jk AqMoR4ZbW8KmCN5AbiOf3+mu9eAF+4+hNvHM+P3xB/wNH7s/pmy7VqKpiY8r m2OaGhP0cI2HGcPfqyNqlinxRhu8e6fzoQG6gzV+p2sew4/g627rM9mE/d5H X0YPn028+2uhf/XzeqCVBKE/wSiZ2su/PjuqvR1W8MErAR/ALsYyMapQlj8c Dmlj7g7A84JT39SgCFRmxZ51LSWw+ByaytPXladfVp4oQTxlxf5rWd7XAToS h1FyAR9hUKtMsaL2QxWmooqFMdVPH7CZaFwB+fzL44hQfK+AucH5gXwNW66W uvjC6lNmCYNVjuVi3X0yuvv4OJo8IkK3RIiz9FjpMoZyKaW6M4FszUz96mA7 Mi2ZYwGnCK5VgSvUGNH6JZpOTSp6IyapskVITTzDVq6eq9lZgSLdvR1/vC9m qIRbhlhX/7vYpco6CE6OIRQLA1LysKxRTaH6V6t0rbeDPOz7dR72fSgi1Cys Ae3KQ6wsUZuxwDvtWRpGs/Bt6/L8g9++qRzOep6mIf745Q49ZV+5ang6y3F7 RL3onOAFTuB2rpkTxiuExbkOFarVMpS0d+K6Kd1arp+RBFpX1zfueMuxxo+w xkfL0JibAxLIZZYnsQYSeGxa5Yniutigw4hWGoNBhxGHHPHAlO8h4PFsnYlQ 8OSZZJz6Mo7ap63dDcb4/nEUwOOSS8yGBDmcoss2E0+0189wpw+0neU3YcsM s77cfsBFMu5Wtwm1kha2OAk0ARitqcurZ1oNhrtdWGYPXxXxYJZopV7giahK +0YTFdnTQi7rTbQwLQvXhhwbJN6XgIfAp0azCZe48RV1FK4ZXjFcc37VK6PL eFPDYcoR89oH0mLwXdNicPgk9aq+7pryGiN8Iy0Ge0TvBj0v8Cktur230qJi rc9YvS4mkSmoe7iVt4ZUtFBOtL+sbeTLjmrIUGmEdJ7lAihCJhgWInqFJEly uWZtG67SZ5A56qQ5TheSR0ULiJBL9kbWODBDcqdZaWy7DZ5GSR7j9Nhue7yC saSdmTCMauJwTIj7QBL1jwU4gusEXBUuwN3ymOJOwoUpXnpDB0ff8nvnDs4Z jbbI8loec1NGcdTtZ4ws/Y2JzCQioo9XNpphoqARHhLSCCueBYvbtnuPFmKL o8TTYAG8wRwNZwkmdHu0qmeS3SpTqZotjunD1fNVvDso1cWHGUP+M1hkRB6t HGam8ak2nXMhy6xzx7tJdWB/Tm2XK9rAHNvVa2NejOz6cgCvKYoFFBUO9l15 TYIJHQpBw9Z7GYmYnsXdeyMTsKfVCLZLTIuqO3qn8YuZXzV7GVJbr05YGC35 AieXpBRThRYoZpJj2IUbhpDuzwhOo3nRQi+KaI4PzBwOtb1oIwmfzRhIQbB0 kJHga6yP2/8UICIYgGP/FxZI+tWCFAAA --0-1161302707-969008466=:323-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0009151100150.323-101000>