On Fri, Aug 18, 2006 at 12:34:10PM +0100, Andrew Smith wrote: > Just a question about the man page securelevel(7) really. > > > > It doesn't mention that for architectures where the aperture is enabled that > the aperture value can only be lowered once in securelevel 1 or higher. > > > > Is this intentionally omitted because some architectures may not have it? > and if so, is there not some incongruity in having it mentioned in the > sysctl pages. >
there's always going to be a level of incongruity because of the differing architectures. that's unavoidable. in this case it was just a case of being missed, i suppose (you did read BUGS in securelevel(7), right? ;) anyway, i've just added machdep.aperture interaction to that page. thanks for the mail. jmc