upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-05-28 04:12:45 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

FreeBSD kernel doesn't allow any process to decrease securelevel. So,

Browse source 
init(8) cannot decrease securelevel.  The manual page explains this
and single_user() doesn't try to downgrade kernel to insecure mode.

Reviewed by:	bde (manual page)
This commit is contained in:
KATO Takenori 1999-09-06 08:41:32 +00:00
parent 8e76f3f49a
commit a4edcf8989
2 changed files with 1 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
sbin/init/init.8
View file

@ -92,8 +92,7 @@ is marked as
.Dq secure .
.Pp
The kernel runs with four different levels of security.
Any super-user process can raise the security level, but only
.Nm
Any super-user process can raise the security level, but no process
can lower it.
The security levels are:
.Bl -tag -width flag

6
sbin/init/init.c
View file

@ -623,12 +623,6 @@ single_user()
char altshell[128];
#endif
/*
* If the kernel is in secure mode, downgrade it to insecure mode.
*/
if (getsecuritylevel() > 0)
setsecuritylevel(0);
if (Reboot) {
/* Instead of going single user, let's reboot the machine */
sync();