Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

This file is no longer needed. Securelevel is now taken care of by

Browse Source 
secmodel_bsd44(9), see src/sys/secmodel/bsd44/secmodel_bsd44_securelevel.c

Pointed out by peter@, thanks!
This commit is contained in:
elad 2006-09-17 14:11:54 +00:00
parent e89f828c3b
commit cf6722febf
1 changed files with 0 additions and 54 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

54
sys/kern/kern_securelevel.c
View File

@ -1,54 +0,0 @@
/* $NetBSD: kern_securelevel.c,v 1.2 2006/04/17 03:45:19 elad Exp $ */
#include "opt_insecure.h"
#include <sys/param.h>
#include <sys/sysctl.h>
#ifdef INSECURE
int securelevel = -1;
#else
int securelevel = 0;
#endif
static int sysctl_kern_securelevel(SYSCTLFN_PROTO);
SYSCTL_SETUP(sysctl_kern_securelevel_setup, "sysctl kern.securelevel setup")
{
sysctl_createv(clog, 0, NULL, NULL,
CTLFLAG_PERMANENT,
CTLTYPE_NODE, "kern", NULL,
NULL, 0, NULL, 0,
CTL_KERN, CTL_EOL);
sysctl_createv(clog, 0, NULL, NULL,
CTLFLAG_PERMANENT|CTLFLAG_READWRITE,
CTLTYPE_INT, "securelevel",
SYSCTL_DESCR("System security level"),
sysctl_kern_securelevel, 0, &securelevel, 0,
CTL_KERN, KERN_SECURELVL, CTL_EOL);
}
/*
* sysctl helper routine for kern.securelevel. ensures that the value
* only rises unless the caller has pid 1 (assumed to be init).
*/
static int
sysctl_kern_securelevel(SYSCTLFN_ARGS)
{
int newsecurelevel, error;
struct sysctlnode node;
newsecurelevel = securelevel;
node = *rnode;
node.sysctl_data = &newsecurelevel;
error = sysctl_lookup(SYSCTLFN_CALL(&node));
if (error || newp == NULL)
return (error);
if (newsecurelevel < securelevel && l && l->l_proc->p_pid != 1)
return (EPERM);
securelevel = newsecurelevel;
return (error);
}