On Sun, Jan 19, 2020 at 11:50:01AM -0700, Theo de Raadt wrote: > Your text seems somewhat backwards, because if you can't open it, it > doesn't matter if it is read-only, it is read-not. It starts with what holds true unconditionally: the fact that you cannot write; then it describes an additional case that has another condition to it.
Is this version better? Index: share/man/man7/securelevel.7 =================================================================== RCS file: /cvs/src/share/man/man7/securelevel.7,v retrieving revision 1.31 diff -u -p -r1.31 securelevel.7 --- share/man/man7/securelevel.7 21 Aug 2019 20:44:09 -0000 1.31 +++ share/man/man7/securelevel.7 19 Jan 2020 20:40:30 -0000 @@ -66,7 +66,10 @@ securelevel may no longer be lowered exc .Pa /dev/mem and .Pa /dev/kmem -cannot be opened +can only be opened if the +.Va kern.allowkmem +.Xr sysctl 8 +variable is set, both are read-only .It raw disk devices of mounted file systems are read-only .It
