diff --git a/share/man/man4/options.4 b/share/man/man4/options.4 index f76d98e9e131..95446b9fe8be 100644 --- a/share/man/man4/options.4 +++ b/share/man/man4/options.4 @@ -1,4 +1,4 @@ -.\" $NetBSD: options.4,v 1.417 2012/11/03 16:47:54 tsutsui Exp $ +.\" $NetBSD: options.4,v 1.418 2012/12/19 13:35:45 mbalmer Exp $ .\" .\" Copyright (c) 1996 .\" Perry E. Metzger. All rights reserved. @@ -30,7 +30,7 @@ .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" .\" -.Dd November 3, 2012 +.Dd December 19, 2012 .Dt OPTIONS 4 .Os .Sh NAME @@ -2224,9 +2224,13 @@ Use CLOCK-Pro, an alternative page replace policy. .Ss Security Options .Bl -ohang .It Cd options INSECURE -Hardwires the kernel security level at \-1. -This means that the system -always runs in secure level \-1 mode, even when running multiuser. +Initializes the kernel security level with \-1 instead of 0. +This means that the system always starts in secure level \-1 mode, even when +running multiuser, unless the securelevel variable is set to value > \-1 in +.Pa /etc/rc.conf . +In this case the kernel security level will be raised to that value when the +.Pa /etc/rc.d/securlevel +script is run during system startup. See the manual page for .Xr init 8 for details on the implications of this.