buildingworld & sysctl -w kern.securelevel=2 help??

David Landgren david at landgren.net
Mon Oct 20 07:30:39 PDT 2003


Lowell Gilbert wrote:
>>is it safe to reboot the system with the sysctl -w kern.securelevel
>>variable  set to -1 ..AFTER the OS has just done a make buildworld ? and
>>then just pickup where i left off ??
> 
> 
> The buildworld should work fine in raised securelevels.  Installing
> (kernels or the rest of the "world") won't, but that's one of the

To confirm, at securelevel -1, you will be able to remove immutable 
files and so forth, in order to install a new kernel. At level -2 and 
-3 you can no longer modify immutable files and/or change the firewall 
rulesets. The latter is not so much of a problem, but the former will 
effectively prevent you from installing a new kernel.

David



More information about the freebsd-questions mailing list