Re: acpidump and INSECURE (was: ARM64 ACPI status report 1)

[mlelstv%serpens.de@localhost (Michael van Elst)]

ryo%nerv.org@localhost (Ryo Shimizu) writes:

>>> acpidump only works with options INSECURE as it uses /dev/mem,
>>> and this is not defined in GENERIC64.
>>Could we have an rc.d script running BEFORE: securelevel doing acpidump -t?

>without INSECURE, securelevel is already 0 at boot.

Yes, but 0 is still 'insecure', allows access to /dev/mem and acpidump
works fine.

When starting with securelevel >= 0 it is advanced to at least 1 either
by the securelevel script or by init when it finishes running rc.

You can even read /dev/mem at securelevel > 0, but that may not help
acpidump as it needs to read ACPI tables which are outside of managed
memory.

Accessing unmanaged memory requires KAUTH_MACHDEP_UNMANAGEDMEM which
is forbidden at securelevel > 0. See the MD routine mm_md_physacc()
for the test what is considered unmanaged.

-- 
-- 
                                Michael van Elst
Internet: mlelstv%serpens.de@localhost
                                "A potential Snark may lurk in every tree."