Re[2]: gpart destroy, zpool destroy, zfs destroy under securelevel 3

2014-05-29 Thread Vladimir Sharun
Hello, > Ok, you are right. But geom_dev restricts access only from user level > applications. When GEOM object does access directly via GEOM methods > this protection won't work. And it seems it isn't easy to fix, all > classes should have own check. Thank you for better clarification. This is t

Re[2]: gpart destroy, zpool destroy, zfs destroy under securelevel 3

2014-05-29 Thread Vladimir Sharun
Hello, > if you have root privileges you can just write some random bytes in some > places and this will be enough to break your system. So, restricting > some gpart's or zpool's actions depending from securelevel looks like > protection from kids. Having root under securelevel 3 confirmed disall