document ipf change at securelevel >= 2

This commit is contained in:
tls 1998-11-14 07:47:36 +00:00
parent da1c106b85
commit f6f55150e7

View File

@ -1,4 +1,4 @@
.\" $NetBSD: init.8,v 1.17 1998/11/14 07:25:35 tls Exp $
.\" $NetBSD: init.8,v 1.18 1998/11/14 07:47:36 tls Exp $
.\"
.\" Copyright (c) 1980, 1991, 1993
.\" The Regents of the University of California. All rights reserved.
@ -107,9 +107,15 @@ This level precludes tampering with filesystems by unmounting them,
but also inhibits running
.Xr newfs 8
while the system is multi-user.
The
.Xr settimeofday 2
system call can only advance the time.
The state of
.Xr ipf 8
(the in-kernel IP filtering facility) may not be changed.
Downgrading from highly secure mode to insecure mode (that is, to single-user
mode) always requires the root password to be entered on the console, whether
the console is marked as 'secure' in