Subject: Re: Immutable bit question
To: Jason Thorpe <firstname.lastname@example.org>
From: matthew green <email@example.com.OZ.AU>
Date: 10/12/1995 17:53:56
On Wed, 11 Oct 1995 09:47:43 -0500 (CDT)
firstname.lastname@example.org (Rob Healey) wrote:
> Will the immutable bit have any effect while rc.local is running, i.e.
> before the kernel security mode is changed from 0 to 1?
I _think_ the semantics of the secure bit are that if it's set, the file
is immutable, regardless of securelevel, but the bit can be cleared when
securelevel < 1. That's just my belief, and, of course, you might want
to double-check "just to be sure".
this is correct.
i'm thinking about writing a paper on the securelevel stuff. there
are some things that you really need to be aware of before using
securelevel > 1 for any real purpose. if anyone knows of problems
they can see (such as, ensuring /etc/rc is 'safe'), please mail them
to me to help.