Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Oct 2003 16:30:21 +0200
From:      David Landgren <david@landgren.net>
To:        questions@freebsd.org
Subject:   Re: buildingworld & sysctl -w kern.securelevel=2 help??
Message-ID:  <3F93F17D.2000309@landgren.net>
In-Reply-To: <44ismkjau4.fsf@be-well.ilk.org>
References:  <2776.192.168.25.10.1066606958.squirrel@bmyster.com> <44ismkjau4.fsf@be-well.ilk.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Lowell Gilbert wrote:
>>is it safe to reboot the system with the sysctl -w kern.securelevel
>>variable  set to -1 ..AFTER the OS has just done a make buildworld ? and
>>then just pickup where i left off ??
> 
> 
> The buildworld should work fine in raised securelevels.  Installing
> (kernels or the rest of the "world") won't, but that's one of the

To confirm, at securelevel -1, you will be able to remove immutable 
files and so forth, in order to install a new kernel. At level -2 and 
-3 you can no longer modify immutable files and/or change the firewall 
rulesets. The latter is not so much of a problem, but the former will 
effectively prevent you from installing a new kernel.

David



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3F93F17D.2000309>