:
:KATO Takenori <k...@ganko.eps.nagoya-u.ac.jp> writes:
:> The kernel runs with four different levels of security.
:> ! Any super-user process can raise the security level, but no process
:> can lower it.
:
:How about "The security level can only be raised by the super-user,
:and cannot be lowered by anyone." instead?
:
:DES
:--
:Dag-Erling Smorgrav - d...@flood.ping.uio.no
Though, as a side note, it should be noted that if you have DDB
enabled then lowering the secure level is pretty easy to do. If you
have access to the console, of course. We used this trick at BEST
a couple of times. Still, I think this might qualify as a bug in
the securelevel implementation.
-Matt
Matthew Dillon
<dil...@backplane.com>
To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message
