security level and fsck

Bill Moran wmoran at potentialtech.com
Fri Jun 4 11:01:05 PDT 2004


Erik Trulsson <ertr1013 at student.uu.se> wrote:

> On Fri, Jun 04, 2004 at 12:32:51PM -0500, J.D. Bronson wrote:
> > is there any connection to fsck not be able to run when
> > I am at security level 3 under 5.2.1?
> > 
> > That seems odd, but sure seems to be the case.
> 
> That sounds very likely.  I would imagine that fsck needs write access
> to the raw disks in order to do its job, but such access is not allowed
> under securelevel 2 and above.
> fsck is normally run very early in the boot-sequence - before the
> securelevel is raised - so in normal operation that would not be any
> major problem.

What about 5's background fsck?  Is that set up so it's able to run after
the securelevel has been raised?  Background fsck seems to wait a minute or
so for the machine to boot before it starts.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com


More information about the freebsd-questions mailing list