schg flags from installworld

Gareth de Vaux bsd at
Tue Sep 18 21:31:40 UTC 2012

On Tue 2012-09-18 (11:30), Gareth de Vaux wrote:
> The host system doesn't have these flags.

I was mistaken, they do.

Looking at /usr/src/share/mk/ and /usr/src/share/mk/ -
bins and libs get installed with schg if PRECIOUSPROG and PRECIOUSLIB are
set respectively in their makefiles, both of which can be overridden by
setting NO_FSCHG, presumably in /etc/make.conf.

Without this doing jail maintenance/upgrades is a nightmare on a host with
a securelevel of 1 but I haven't seen this mentioned anywhere.

More information about the freebsd-questions mailing list