Module Name: src Committed By: mbalmer Date: Wed Dec 19 13:35:45 UTC 2012
Modified Files: src/share/man/man4: options.4 Log Message: Better document what options INSECURE means. To generate a diff of this commit: cvs rdiff -u -r1.417 -r1.418 src/share/man/man4/options.4 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/share/man/man4/options.4 diff -u src/share/man/man4/options.4:1.417 src/share/man/man4/options.4:1.418 --- src/share/man/man4/options.4:1.417 Sat Nov 3 16:47:54 2012 +++ src/share/man/man4/options.4 Wed Dec 19 13:35:45 2012 @@ -1,4 +1,4 @@ -.\" $NetBSD: options.4,v 1.417 2012/11/03 16:47:54 tsutsui Exp $ +.\" $NetBSD: options.4,v 1.418 2012/12/19 13:35:45 mbalmer Exp $ .\" .\" Copyright (c) 1996 .\" Perry E. Metzger. All rights reserved. @@ -30,7 +30,7 @@ .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" .\" -.Dd November 3, 2012 +.Dd December 19, 2012 .Dt OPTIONS 4 .Os .Sh NAME @@ -2224,9 +2224,13 @@ Use CLOCK-Pro, an alternative page repla .Ss Security Options .Bl -ohang .It Cd options INSECURE -Hardwires the kernel security level at \-1. -This means that the system -always runs in secure level \-1 mode, even when running multiuser. +Initializes the kernel security level with \-1 instead of 0. +This means that the system always starts in secure level \-1 mode, even when +running multiuser, unless the securelevel variable is set to value > \-1 in +.Pa /etc/rc.conf . +In this case the kernel security level will be raised to that value when the +.Pa /etc/rc.d/securlevel +script is run during system startup. See the manual page for .Xr init 8 for details on the implications of this.