Project

General

Profile

Actions

Bug #1572

closed

DFBSD 2.5.0 - securelevel not working?

Added by ahuete.devel over 15 years ago. Updated over 15 years ago.

Status:
Closed
Priority:
High
Assignee:
Category:
-
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:

Description

Hi all,

Maybe I'm doing something wrong, but securelevel(8) seems to be non-working.
I've done the following:

  1. grep secure /etc/rc.conf
    kern_securelevel="2"
  2. sysctl kern.securelevel
    kern.securelevel: 2
  3. ktrace ./od
    Descriptor is 3
  4. kdump -f ./ktrace.out
    ...
    892 od CALL open(0x8048687,O_RDWR,<unused>0x804977c)
    892 od NAMI "/dev/da0s1d"
    892 od RET open 3
    ...

I could open it for read-write! Following the definition in the
manpage for secure level 2:

"2 Highly secure mode - same as secure mode, plus disks may not be
opened for writing (except by mount(2)) whether mounted or not.
This level precludes tampering with file systems by unmounting
them, but also inhibits running newfs(8) while the system is multi-
user."

Am I missing something or securelevel is not working here?

Cheers,
Antonio Huete

Actions

Also available in: Atom PDF