On Mon, Oct 09, 2000 at 10:21:49AM -0400, Vivek Khera wrote:
> >>>>> "a" == andrew <[EMAIL PROTECTED]> writes:
>
> a> On Sun, 8 Oct 2000, Wilko Bulte wrote:
>
> >> People already having root privs are not stopped by it. Or is it only aimed
> >> at the higher securelevels?
>
> a> I assume its for secure levels 1 and above and if you were a security
> a> conscious site I imagine it would be a very useful feature.
>
> My question is why does /usr/obj need the schg flag set on anything in
> the first place? It basically means that on a secure system you have
> to reboot to single user just to delete the build tree.
>
It doesn't (as of 4.x). Previous branches did set the schg flag, however
4.x and 5.x no longer do this.
--
Chris D. Faulhaber - [EMAIL PROTECTED] - [EMAIL PROTECTED]
--------------------------------------------------------
FreeBSD: The Power To Serve - http://www.FreeBSD.org
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message
