On Tue, Jan 21, 2020 at 10:55:47PM +0100, Klemens Nanni wrote: > This shows that mem(4) can be opened at "Secure mode" even though > securelevel(7) says it cannot. Rebooting with allowkmem unset shows that /dev/mem cannot be opened at all:
# kern.securelevel kern.allowkmem
kern.securelevel=1
kern.allowkmem=0
# a.out
a.out: open read-only: Operation not permitted
So unless I'm mistaken, my diff does adjust documentation towards
actual behaviour.
