HardenedBSD/etc/rc.d/securelevel
Lars Engels 6c1a5e837d - Add descriptions to most of the rc scripts. Those are mostly taken from their
daemon's manpage and probably improved.
- Consistently use "filesystem" not "file system".

Approved by:	bapt, brueffer
Differential Revision:	D452
2016-04-23 16:10:54 +00:00

31 lines
528 B
Bash
Executable File

#!/bin/sh
#
# $FreeBSD$
#
# PROVIDE: securelevel
# REQUIRE: adjkerntz ipfw ipfilter pf
. /etc/rc.subr
name="securelevel"
desc="Securelevel configuration"
rcvar='kern_securelevel_enable'
start_cmd="securelevel_start"
stop_cmd=":"
# Last chance to set sysctl variables that failed the first time.
#
/etc/rc.d/sysctl lastload
securelevel_start()
{
if [ ${kern_securelevel} -ge 0 ]; then
echo 'Raising kernel security level: '
${SYSCTL} kern.securelevel=${kern_securelevel}
fi
}
load_rc_config $name
run_rc_command "$1"