Re: kernel file flags

From: M. Warner Losh <imp_at_bsdimp.com>
Date: Sun, 07 Dec 2003 13:10:35 -0700 (MST)
In message: <20031207193213.GD3081_at_unixpages.org>
            Christian Brueffer <chris_at_unixpages.org> writes:
: it seems that since a few weeks the schg flag is not getting set for the
: kernel and modules anymore, so they can be replaced with securelevel 1
: set.
: 
: I'd consider that a bug.  Was this intended?

Yes.  It was done with with malice of forethought.  If you want a
secure system, you need to make sure it is secure.  schg is an
anti-foot shooting measure only so long as /etc/rc.d* don't have schg
on them...

Warner
Received on Sun Dec 07 2003 - 11:11:01 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:32 UTC