Subject: Re: Immutable bit question
To: Jason Thorpe <thorpej@nas.nasa.gov>
From: matthew green <mrg@mame.mu.OZ.AU>
List: current-users
Date: 10/12/1995 17:53:56
   On Wed, 11 Oct 1995 09:47:43 -0500 (CDT) 
    rhealey@kas.helios.mn.org (Rob Healey) wrote:
   
    > 	Will the immutable bit have any effect while rc.local is running, i.e.
    > 	before the kernel security mode is changed from 0 to 1?
   
   I _think_ the semantics of the secure bit are that if it's set, the file 
   is immutable, regardless of securelevel, but the bit can be cleared when 
   securelevel < 1.  That's just my belief, and, of course, you might want 
   to double-check "just to be sure".

this is correct.

i'm thinking about writing a paper on the securelevel stuff.  there
are some things that you really need to be aware of before using
securelevel > 1 for any real purpose.  if anyone knows of problems
they can see (such as, ensuring /etc/rc is 'safe'), please mail them
to me to help.

.mrg.