Re: Init(8) cannot decrease securelevel

[Matthew Dillon]

:
:KATO Takenori <[EMAIL PROTECTED]> writes:
:>   The kernel runs with four different levels of security.
:> ! Any super-user process can raise the security level, but no process
:>   can lower it.
:
:How about "The security level can only be raised by the super-user,
:and cannot be lowered by anyone." instead?
:
:DES
:-- 
:Dag-Erling Smorgrav - [EMAIL PROTECTED]

    Though, as a side note, it should be noted that if you have DDB
    enabled then lowering the secure level is pretty easy to do.  If you
    have access to the console, of course.  We used this trick at BEST
    a couple of times.  Still, I think this might qualify as a bug in
    the securelevel implementation.

                                        -Matt
                                        Matthew Dillon 
                                        <[EMAIL PROTECTED]>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message