Subject: Re: some questions
To: Thor Lancelot Simon <tls@rek.tjls.com>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: tech-security
Date: 01/07/2006 20:44:17
On Sat, Jan 07, 2006 at 02:18:12PM -0500, Thor Lancelot Simon wrote:
> > 
> > int
> > i386_iopl(l, args, retval)
> > {
> > [...]
> > 	if (securelevel > 1)
> 
> Securelevel > 1?

Yes, on both i386 and amd64

> That test should be securelevel >= 1.  It's a serious
> bug if it's not.

Yes, I think so. BTW, the i386_iopl manpage doesn't talk at all about
securelevels.

-- 
Manuel Bouyer <bouyer@antioche.eu.org>
     NetBSD: 26 ans d'experience feront toujours la difference
--