It's documented behaviour.
security(8) code states
858: # Make backups of the labels for any mounted disks
859: # and produce diffs when they change.
My problem is, my sd1 has /altroot, swap, and RAID on it.
None of which is mounted, as far as security(8) is concerned.
But it sure would be nice to have automated disklabel backups
for that disk.
Would you consider simply backing up all the labels?
I'm not much of a perl guy so here is part of an solution
in shell-script.
$ sysctl -n hw.disknames | sed "s/:.\{16\}//g" | tr "," "\n"
Greetings Ben
