>Number:         3299
>Category:       misc
>Synopsis:       init man page is innacurate about flags
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    misc-bug-people (Misc Bug People)
>State:          open
>Class:          doc-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Mar  7 06:50:01 1997
>Last-Modified:
>Originator:     Rick Byers
>Organization:
	Internet Access Worldwide
>Release:        NetBSD-current, March 4, 97
>Environment:

System: NetBSD rickb.iaw.on.ca 1.2C NetBSD 1.2C (RICKB) #0: Wed Mar 5 20:07:47 EST 1997 root@rickb.iaw.on.ca:/usr/src/sys/arch/i386/compile/RICKB i386

>Description:

	I'm feeling picky today, so here you go.
	The init man page is innacurate about the handling of flags under
	different security levels.  It says that while in secure mode (1)
	"Immutable and append-only flags may not be changed", this isn't
	entirely true.  They may be turned on, and the user flags may be
	turned off, but the system flags can not be turned off.  

>How-To-Repeat:
	man init
>Fix:
	Use the following patch:
*** init.8.orig	Fri Mar  7 08:47:24 1997
--- init.8	Fri Mar  7 08:48:58 1997
***************
*** 94,103 ****
  .It Ic -1
  Permanently insecure mode \- always run system in level 0 mode.
  .It Ic 0
! Insecure mode \- immutable and append-only flags may be turned off.
  All devices may be read or written subject to their permissions.
  .It Ic 1
! Secure mode \- immutable and append-only flags may not be changed;
  disks for mounted filesystems,
  .Pa /dev/mem ,
  and
--- 94,103 ----
  .It Ic -1
  Permanently insecure mode \- always run system in level 0 mode.
  .It Ic 0
! Insecure mode \- immutable and append-only flags may changed.
  All devices may be read or written subject to their permissions.
  .It Ic 1
! Secure mode \- system immutable and append-only flags may not be turned off;
  disks for mounted filesystems,
  .Pa /dev/mem ,
  and

>Audit-Trail:
>Unformatted: