Re: sysctl kern.securelevel=2
On Tue, 12 Oct 2004 01:33:44 -0400 epilogue <[EMAIL PROTECTED]> wrote: > On Mon, 11 Oct 2004 20:03:32 -0400 > Chris Collins <[EMAIL PROTECTED]> wrote: > > > Hello Alll > > > > I was wondering what is the best kern.securelevel to run on a > > machine that provides general internet services, Web, FTP and Email. > > I don't want this so tight I cannot use the machine and I have also > > read in some post that having the secure level set to high can stop > > a fsck. > > > > I am running 4.8 stable with ipfw and current kern.securelevel at > > 0. After reading the man page I am thinking that I can safely at > > level 2 but I am not sure because of this line in the man page "plus > > disks may not be opened for writing (except by mount(2)) whether > > mounted or not" > > What exactly does this mean? > > > > > > Any help would be appreciated. > > in case you haven't already tried it, you may find 'man securelevel' > helpful. and more closely reading messages *may* save me from embarrassment. my apologies. epi > > Thanks > > Chris > > ___ > > [EMAIL PROTECTED] mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to > > "[EMAIL PROTECTED]" > > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: sysctl kern.securelevel=2
On Mon, 11 Oct 2004 20:03:32 -0400 Chris Collins <[EMAIL PROTECTED]> wrote: > Hello Alll > > I was wondering what is the best kern.securelevel to run on a machine > that provides general internet services, Web, FTP and Email. I don't > want this so tight I cannot use the machine and I have also read in > some post that having the secure level set to high can stop a fsck. > > I am running 4.8 stable with ipfw and current kern.securelevel at 0. > After reading the man page I am thinking that I can safely at level 2 > but I am not sure because of this line in the man page "plus disks may > not be opened for writing (except by mount(2)) whether mounted or not" > What exactly does this mean? > > > Any help would be appreciated. in case you haven't already tried it, you may find 'man securelevel' helpful. > Thanks > Chris > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
sysctl kern.securelevel=2
Hello Alll I was wondering what is the best kern.securelevel to run on a machine that provides general internet services, Web, FTP and Email. I don't want this so tight I cannot use the machine and I have also read in some post that having the secure level set to high can stop a fsck. I am running 4.8 stable with ipfw and current kern.securelevel at 0. After reading the man page I am thinking that I can safely at level 2 but I am not sure because of this line in the man page "plus disks may not be opened for writing (except by mount(2)) whether mounted or not" What exactly does this mean? Any help would be appreciated. Thanks Chris ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
