Skip site navigation (1)Skip section navigation (2)
Date:      19 Jun 1999 11:31:15 +0200
From:      Dag-Erling Smorgrav <des@flood.ping.uio.no>
To:        Greg Black <gjb-freebsd@gba.oz.au>
Cc:        Dag-Erling Smorgrav <des@flood.ping.uio.no>, Frank Tobin <ftobin@bigfoot.com>, Kirill Nosov <slash@leontief.net>, freebsd-security@FreeBSD.ORG
Subject:   Re: securelevel descr
Message-ID:  <xzpu2s41qqk.fsf@flood.ping.uio.no>
In-Reply-To: Greg Black's message of "Sat, 19 Jun 1999 14:24:52 %2B1000"
References:  <Pine.BSF.4.10.9906180326180.55914-100000@srh0710.urh.uiuc.edu>      <xzpu2s5zujv.fsf@flood.ping.uio.no> <19990619042453.7244.qmail@alice.gba.oz.au>

next in thread | previous in thread | raw e-mail | index | archive | help
Greg Black <gjb-freebsd@gba.oz.au> writes:
> > > Hrm, that is a excellent idea could be added as an extra securelevel, such
> > > as -2.
> > -2? Why -2? Securelevels are numbered upwards from 0, in increasing
> > order of paranoia.
> Ah, no, they're not.  The init(8) man page is quite clear that
> that are numbered upwards from -1.  For the proposed purpose,
> the -2 value makes some kind of sense.

-1 is just a magic value that tells init not to raise the securelevel
beyond 0. It's not a real securelevel, and is functionally
indistinguishable from securelevel 0.

DES
-- 
Dag-Erling Smorgrav - des@flood.ping.uio.no


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpu2s41qqk.fsf>