Bug 21729

Summary: Using /stand/sysinstall to set security level to "medium" doesn't reduce kern_securelevel in /etc/rc.conf if security level was previously set to "high".
Product: Base System Reporter: c6re <c6re>
Component: confAssignee: Murray Stokely <murray>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: 4.1.1-RELEASE   
Hardware: Any   
OS: Any   

Description c6re 2000-10-03 17:20:01 UTC 
After using /stand/sysinstall to set security level to "high," 
kern_securelevel="2" is added to /etc/rc.conf.  

If /stand/sysinstall is later used to set security level to "moderate,"
kern_securelevel="2" is not overridden, thus the kernel security level
remains at 2.

Fix: 

Manually edit /etc/rc.conf to set kern_securelevel to the 
desired level.
How-To-Repeat: Use /stand/sysinstall to set security level to "high," then use
/stand/sysinstall to set security level to "moderate."
Comment 1 Johan Karlsson freebsd_committer freebsd_triage 2000-10-04 20:36:38 UTC 
Responsible Changed
From-To: freebsd-bugs->murray

Over to sysinstall maintainer.
Comment 2 Murray Stokely freebsd_committer freebsd_triage 2000-10-05 22:15:51 UTC 
State Changed
From-To: open->analyzed

Trivial patch submitted to Jordan for approval.  Should be committed soon.
Comment 3 Murray Stokely freebsd_committer freebsd_triage 2000-10-06 00:28:05 UTC 
State Changed
From-To: analyzed->closed

Patch applied to -current.  Thanks!