[Bug 260915] etcupdate extract fails with securelevel=2

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 03 Jan 2022 23:30:57 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=260915

            Bug ID: 260915
           Summary: etcupdate extract fails with securelevel=2
           Product: Base System
           Version: 12.2-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: misc
          Assignee: bugs@FreeBSD.org
          Reporter: antonfb@hesiod.org

Machine is set at kern_securelevel=2 in /etc/rc.conf
etcupdate extract errors....
paris.hesiod.org:root[2]: etcupdate extract
Failed to build new tree.
paris.hesiod.org:root[12]: cat log
>>> extract command: tarball=
rm: /var/db/etcupdate/current/var/empty: Operation not permitted
rm: /var/db/etcupdate/current/var: Directory not empty
rm: /var/db/etcupdate/current: Directory not empty
chflags: /var/db/etcupdate/current/var/empty: Operation not permitted
rm: /var/db/etcupdate/current/var/empty: Operation not permitted
rm: /var/db/etcupdate/current/var: Directory not empty
rm: /var/db/etcupdate/current: Directory not empty

etcupdate extract and other commands should function under securelevels.
etcupdate (no args or resolve) is generally run single user and is ok because
securelevel is not set.

etcupdate seems not ready for production and general use

-- 
You are receiving this mail because:
You are the assignee for the bug.