kernel security level

From: Steve Peck (steve.peck@uk.easynet.net)
Date: 05/09/01 

Date: Wed, 9 May 2001 20:09:21 +0100
From: Steve Peck <steve.peck@uk.easynet.net>
To: security@FreeBSD.ORG

Hi,

I've installed the FreeBSD 4.3

And I got this strange problem where the kern.sercurelevel was set to 1.

I had a version of 4.2 which just defaults to -1.

Is this something new?

Although it seems like a good idea, I had much trouble finding out why
I couldn't run X windows. Soon as I found a reference to this /dev/mem
suddenly was permitted and X started up - but only as root :-(.

I have since found that I can run X (as root) on kern.securelevel = 0
But if I set it to this via /etc/sysctl.conf it just gets upgraded to
level 1! So, I now have it set to level -1 in /etc/sysctl.conf.

If I did want to run at level 0 then I would have to upgrade it manually
By loggin in as root and doing
# sysctl - w kern.securelevel=0
every reboot :-(

Now, have I done something stangely bad during my install.

I just ftp'd it from the ftp.uk.FreeBSD.org site.

If I try to startx as a user then I now get

Fatal server error:
xf86OpeConsole:Server must be suid root

Hmmmm, anyone got any ideas?

Cheers
Steve

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: advanced programming unix environment
    ... I would appreciate if somebody else running freebsd 7.0 could download source and see if it makes fine on their installation. ... *** Error code 1 ... be unable to log in as root in any way, ... After the initial install I was able to log ...
    (freebsd-questions)
  • ClamAV 0.67, SendMail, FreeBSD 5.2.1-RELEASE-p1
    ... Hello FreeBSD Gurus! ... I am trying to install ClamAV Milter in my system. ... Upgrade virus data files: ... Reconfigure sendmail. ...
    (freebsd-questions)
  • Re: mp3 properties not showing in Konqueror
    ... Root or using Krusader). ... Search for id3, install it, and then your apps will show the tags. ... Windows and linux is a bit different here, where a windows app will have ... because of the upgrade. ...
    (alt.os.linux.suse)
  • Re: "Upgrading" from 5.4 to 6.1
    ... to install freebsd 6.1 on the machine. ... It's a running system with freebsd 5.4. ... For me the binary upgrade from cdrom worked no problem. ... mergemaster -p before and mergemaster after, ...
    (comp.unix.bsd.freebsd.misc)
  • Re: FreeBSD or DEBIAN for remotely administered internet server
    ... What, then, do I manage better on Debain than FreeBSD? ... Program Installation / Upgrade: ... dependencies), what conflicts brings which package, etc, and I can make ... and after that install everything. ...
    (comp.unix.bsd.freebsd.misc)