Subject: Re: solving various bug reports...
To: None <darrenr@cyber.com.au, tech-security@NetBSD.ORG>
From: Mike Long <mikel@shore.net>
List: tech-security
Date: 06/26/1997 13:30:49
>From: Darren Reed <darrenr@cyber.com.au>
>Date: Fri, 27 Jun 1997 02:57:22 +1000 (EST)
>
>In some mail I received from Mike Long, sie wrote
>> 
>> >From: Darren Reed <darrenr@cyber.com.au>
>> >Date: Thu, 26 Jun 1997 17:48:28 +1000 (EST)

>> >How about adding a loop to inetd that checks if the securelevel is 0
>> >and if so, waits until it becomes > 0 ?  This is based on the theory
>> >that securelevel is only 0 during booting and the eventual multiuser
>> >value for securelevel > 0 whilst allowing it to start if secureleve is -1.
>> 
>> This won't work.  If inetd dies after the system has gone multiuser
>> and you restart it, the restarted inetd will never accept connections.
>
>so I missed explaining a case where inetd should not wait if securelevel
>is > 0 (thanks for pointing it out).

No, this will still fail if 'options INSECURE' is used.  securelevel
will be zero in multi-user mode, and will never change.
-- 
Mike Long <mikel@shore.net>                http://www.shore.net/~mikel
"Every normal man must be tempted at times to spit on his hands,
hoist the black flag, and begin slitting throats." -- H.L. Mencken