Subject: kern.securelevel=1 by default, ipf as LKM
To: None <port-sparc@netbsd.org>
From: Grant Beattie <grant@grunta.com>
List: port-sparc
Date: 10/02/2001 11:01:56
I've wondered this for some time now.. kern.securelevel defaults to 0
on i386, but 1 on sparc. why is this so?

with ipf built as an LKM,

# ipf -E
SIOCFRENB: Invalid argument

ipf -E is called from /etc/rc.d/ipfilter.

Obviously once the module is loaded, it's activated, but this could
cause confusion for people expecting ipf -D to disable it.

thoughts?

g.