Better document what options INSECURE means.

This commit is contained in:
mbalmer 2012-12-19 13:35:45 +00:00
parent 8822446620
commit f0b3faf064

View File

@ -1,4 +1,4 @@
.\" $NetBSD: options.4,v 1.417 2012/11/03 16:47:54 tsutsui Exp $
.\" $NetBSD: options.4,v 1.418 2012/12/19 13:35:45 mbalmer Exp $
.\"
.\" Copyright (c) 1996
.\" Perry E. Metzger. All rights reserved.
@ -30,7 +30,7 @@
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
.\"
.Dd November 3, 2012
.Dd December 19, 2012
.Dt OPTIONS 4
.Os
.Sh NAME
@ -2224,9 +2224,13 @@ Use CLOCK-Pro, an alternative page replace policy.
.Ss Security Options
.Bl -ohang
.It Cd options INSECURE
Hardwires the kernel security level at \-1.
This means that the system
always runs in secure level \-1 mode, even when running multiuser.
Initializes the kernel security level with \-1 instead of 0.
This means that the system always starts in secure level \-1 mode, even when
running multiuser, unless the securelevel variable is set to value > \-1 in
.Pa /etc/rc.conf .
In this case the kernel security level will be raised to that value when the
.Pa /etc/rc.d/securlevel
script is run during system startup.
See the manual page for
.Xr init 8
for details on the implications of this.