rc.conf kld_list vs kern.securelevel

[Allan Jude]

On 2018-05-18 07:04, Andreas Nilsson wrote:
> Hello,
> 
> I recently configured a system where kern.securelevel=1 would be good, but
> noticed that modules listed in kld_list in rc.conf is then not loaded.
> Would it not be a good to either explicitly state that kld_list cannot be
> used with kern.securelevel, or have kld run before sysctl?
> 
> Best regards
> Andreas
> _______________________________________________
> freebsd-jail at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-jail
> To unsubscribe, send any mail to "freebsd-jail-unsubscribe at freebsd.org"
> 

It would seem that kld_list would need to be loaded before sysctl run
anyway, since the sysctl you are trying to set might not exist until the
kernel modules are loaded. Is the securelevel actually set by the sysctl
service?

-- 
Allan Jude

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 834 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-jail/attachments/20180518/c2309918/attachment.sig>