From f02bee695e62d94d0603bdd065d7d9b96c917238 Mon Sep 17 00:00:00 2001 From: rwatson Date: Sat, 29 Nov 2003 21:44:51 +0000 Subject: Add a Securelevel sub-menu to the Security configuration menu, permitting the administrator to select a securelevel top operate at. Include a helpfile summarizing some of the information from init(8). This allows for explicit configuration of securelevels, which was previously implicit in Security Profile selection. Currently, there are no checkboxes for the active securelevel, because sysinstall's facilities for deriving "current settings" from rc.conf may use only one variable, not two, and I opted for the simplest approach at this point. Approved by: re (scottl) --- usr.sbin/sysinstall/config.c | 46 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) (limited to 'usr.sbin/sysinstall/config.c') diff --git a/usr.sbin/sysinstall/config.c b/usr.sbin/sysinstall/config.c index 570cb61..27937e1 100644 --- a/usr.sbin/sysinstall/config.c +++ b/usr.sbin/sysinstall/config.c @@ -537,6 +537,52 @@ configOSF1(dialogMenuItem *self) #endif int +configSecurelevel(dialogMenuItem *self) +{ + WINDOW *w = savescr(); + + dialog_clear_norefresh(); + dmenuOpenSimple(&MenuSecurelevel, FALSE); + restorescr(w); + return DITEM_SUCCESS; +} + +int +configSecurelevelDisabled(dialogMenuItem *self) +{ + + variable_set2("kern_securelevel_enable", "NO", 1); + return DITEM_SUCCESS; +} + +int +configSecurelevelSecure(dialogMenuItem *self) +{ + + variable_set2("kern_securelevel_enable", "YES", 1); + variable_set2("kern_securelevel", "1", 1); + return DITEM_SUCCESS; +} + +int +configSecurelevelHighlySecure(dialogMenuItem *self) +{ + + variable_set2("kern_securelevel_enable", "YES", 1); + variable_set2("kern_securelevel", "2", 1); + return DITEM_SUCCESS; +} + +int +configSecurelevelNetworkSecure(dialogMenuItem *self) +{ + + variable_set2("kern_securelevel_enable", "YES", 1); + variable_set2("kern_securelevel", "3", 1); + return DITEM_SUCCESS; +} + +int configSecurity(dialogMenuItem *self) { WINDOW *w = savescr(); -- cgit v1.1