security level and fsck

Erik Trulsson ertr1013 at student.uu.se
Fri Jun 4 11:11:46 PDT 2004


On Fri, Jun 04, 2004 at 02:00:36PM -0400, Bill Moran wrote:
> Erik Trulsson <ertr1013 at student.uu.se> wrote:
> 
> > On Fri, Jun 04, 2004 at 12:32:51PM -0500, J.D. Bronson wrote:
> > > is there any connection to fsck not be able to run when
> > > I am at security level 3 under 5.2.1?
> > > 
> > > That seems odd, but sure seems to be the case.
> > 
> > That sounds very likely.  I would imagine that fsck needs write access
> > to the raw disks in order to do its job, but such access is not allowed
> > under securelevel 2 and above.
> > fsck is normally run very early in the boot-sequence - before the
> > securelevel is raised - so in normal operation that would not be any
> > major problem.
> 
> What about 5's background fsck?  Is that set up so it's able to run after
> the securelevel has been raised?  Background fsck seems to wait a minute or
> so for the machine to boot before it starts.

I don't run 5.x so I don't know for sure, but it certainly sounds like
background fsck does not work well together with a securelevel 2 or
above.  So if you want to run at a high securelevel you can't use
background fsck.


-- 
<Insert your favourite quote here.>
Erik Trulsson
ertr1013 at student.uu.se


More information about the freebsd-questions mailing list