Subject: Re: kern.securelevel=1 by default, ipf as LKM
To: matthew green <mrg@eterna.com.au>
From: Grant Beattie <grant@grunta.com>
List: port-sparc
Date: 10/02/2001 11:51:41
On Tue, Oct 02, 2001 at 11:26:13AM +1000, matthew green wrote:
>
> I've wondered this for some time now.. kern.securelevel defaults to 0
> on i386, but 1 on sparc. why is this so?
>
> cuz of xf86 -- sparc isn't useless about X without it.
I figured that was the case. :)
> with ipf built as an LKM,
>
> # ipf -E
> SIOCFRENB: Invalid argument
>
> ipf -E is called from /etc/rc.d/ipfilter.
>
> Obviously once the module is loaded, it's activated, but this could
> cause confusion for people expecting ipf -D to disable it.
>
> hm? ipf -D doesn't appear to require securelevel set or unset? i
> can see it might not work very nicely at securelevel=2, but that's
> something one has to ask or...
Hmm, yes you're right - it behaves the same with securelevel = 0. I'm
not sure what the cause of this might be.
This is 1.5.2/sparc. It behaves correctly on /i386.
Darren?
g.