View Single Post
Old 7th July 2008
carpman carpman is offline
Shell Scout
 
Join Date: Jul 2008
Posts: 94
Default

thanks for replies.

To clarify, i don't need line:

Code:
kern.securelevel=2
in /etc/sysctl.conf
and

/etc/defaults/rc.conf should be:

Code:
kern_securelevel_enable="NO"	# kernel security level (see init(8)),
kern_securelevel="-1"	# range: -1..3 ; `-1' is the most insecure



Also that the setting in rc.conf overrides that in /etc/defaults/rc.conf ?


Changing entry in sysctl.conf and moving openntp entry above kern_securelevel="1" in rc.conf resulted in time being set correctly on boot.

Now this done i believe i should have following setup:

rc.conf
Code:
kern.securelevel="2"

/etc/defaults/rc.conf
Code:
kern_securelevel_enable="NO"	# kernel security level (see init(8)),
kern_securelevel="-1"	# range: -1..3 ; `-1' is the most insecure

/etc/sysctl.conf
Code:
# kern.securelevel="2"
This should still give me secure mode?

many thanks
Reply With Quote