Re: Init(8) cannot decrease securelevel

[Peter Jeremy]

Matthew Dillon <[EMAIL PROTECTED]> wrote:
>   If the system winds up in a state where a kernel core cannot be
>   generated, DDB is the only way to figure out what is going on.  
>   securelevel is a mechanism which attempts to guarentee data security,
>   at least to a degree.

The problem is that DDB currently allows too much freedom.  It
needs to disable various commands as the securelevel is raised.
Working out which commands is the non-trivial exercise - especially
since you can add new ones with DB_COMMAND().

Peter



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message