Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Sep 1998 19:25:42 +1000
From:      Bruce Evans <bde@zeta.org.au>
To:        mark@grondar.za, tlambert@primenet.com
Cc:        current@FreeBSD.ORG, max@wide.ad.jp
Subject:   Re: unremovable schg flag?
Message-ID:  <199809100925.TAA09021@godzilla.zeta.org.au>

next in thread | raw e-mail | index | archive | help
>> > I noticed that this file has schg flag set, and I could not do
>> > chflags noschg even as root.
>
>[ ... ]
>
>> Have you set your securelevel to something other than -1? If so, this is
>> what schg is all about.
>
>Aparently not:
>
>> > After struggling for some time, I went into the single user mode
>> > and clri'd that file.

This shows that securelevel 1 isn't actually secure.  (Starting from
the uninitialized shell variable kern_securelevel, /etc/rc sets the
kernel securelevel to 0.  init(8) knows too much about securelevels
and bumps this to 1.  Level 1 is a little bit insecure.)

Bruce

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199809100925.TAA09021>