diff options
| author | keramida <keramida@FreeBSD.org> | 2006-07-12 18:12:11 +0000 |
|---|---|---|
| committer | keramida <keramida@FreeBSD.org> | 2006-07-12 18:12:11 +0000 |
| commit | 4aa5a765bd8fc51e57b5053335966b9e3b51c281 (patch) | |
| tree | e12f7538c02b7fdb1128dce2bfe8fd29d015dcd9 /share/man/man7/security.7 | |
| parent | cb9048aebc747f4586ffc4e30498f516453927d3 (diff) | |
| download | FreeBSD-src-4aa5a765bd8fc51e57b5053335966b9e3b51c281.zip FreeBSD-src-4aa5a765bd8fc51e57b5053335966b9e3b51c281.tar.gz | |
When securelevel is >= 1, /dev/io may not be opened at all (not just for
write). Update the securelevel description to match this.
Reported by: Alexandros Kosiaris <akosiaris@gmail.com>
MFC after: 3 days
Diffstat (limited to 'share/man/man7/security.7')
| -rw-r--r-- | share/man/man7/security.7 | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/share/man/man7/security.7 b/share/man/man7/security.7 index 4ec330e..8a3aee3 100644 --- a/share/man/man7/security.7 +++ b/share/man/man7/security.7 @@ -548,11 +548,12 @@ All devices may be read or written subject to their permissions. Secure mode \- the system immutable and system append-only flags may not be turned off; disks for mounted file systems, -.Pa /dev/mem , -.Pa /dev/kmem +.Pa /dev/mem and +.Pa /dev/kmem +may not be opened for writing; .Pa /dev/io -(if your platform has it) may not be opened for writing; +(if your platform has it) may not be opened at all; kernel modules (see .Xr kld 4 ) may not be loaded or unloaded. |
