Re: Init(8) cannot decrease securelevel

[Matthew Dillon]

:>     Though, as a side note, it should be noted that if you have DDB
:>     enabled then lowering the secure level is pretty easy to do.  If you
:>     have access to the console, of course.
:
:It should also be noted that it makes no sense to enable DDB on
:systems that need to use elevated securelevels.
:
:-- 
:Greg Black -- <[EMAIL PROTECTED]>

   I disagree quite strongly.  DDB provides a mechanism to allow a
   sysadmin to obtain a greater amount of information from a panic
   situation then he could get otherwise.  Being able to obtain this
   information does not run counter to running with a raised securelevel.

   If the system winds up in a state where a kernel core cannot be
   generated, DDB is the only way to figure out what is going on.  
   securelevel is a mechanism which attempts to guarentee data security,
   at least to a degree.  These two items do not clash.

                                        -Matt
                                        Matthew Dillon 
                                        <[EMAIL PROTECTED]>



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message