From nobody@FreeBSD.org  Tue Dec 12 06:41:13 2000
Return-Path: <nobody@FreeBSD.org>
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 9D7F037B404
	for <freebsd-gnats-submit@FreeBSD.org>; Tue, 12 Dec 2000 06:41:12 -0800 (PST)
Received: (from nobody@localhost)
	by freefall.freebsd.org (8.11.1/8.11.1) id eBCEfCi33809;
	Tue, 12 Dec 2000 06:41:12 -0800 (PST)
	(envelope-from nobody)
Message-Id: <200012121441.eBCEfCi33809@freefall.freebsd.org>
Date: Tue, 12 Dec 2000 06:41:12 -0800 (PST)
From: rboyd@pokerspot.com
Sender: nobody@FreeBSD.org
To: freebsd-gnats-submit@FreeBSD.org
Subject: date(1) doesn't detail kern_time.c securelevel check
X-Send-Pr-Version: www-1.0

>Number:         23502
>Category:       docs
>Synopsis:       date(1) doesn't detail kern_time.c securelevel check
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-doc
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Dec 12 06:50:01 PST 2000
>Closed-Date:    Wed Jan 17 21:28:54 GMT 2001
>Last-Modified:  Wed Jan 17 21:29:22 GMT 2001
>Originator:     Robert Boyd
>Release:        4.2R
>Organization:
Pokerspot
>Environment:
FreeBSD game2.pokerspot.com 4.2-RELEASE FreeBSD 4.2-RELEASE #0: Mon Nov 20 13:02:55 GMT 2000     jkh@bento.FreeBSD.org:/usr/src/sys/compile/GENERIC  i386

>Description:
the securelevel check in kern_time.c is non-intuitive.  This should be documented somewhere people would look when realizing they are unable to set the date.  date(1) is probably the best candidate.
>How-To-Repeat:
sysctl -w kern.securelevel=2
gdate --set blah
>Fix:
sys/kern/kern_time.c checks securelevel > 1 before allowing date changes higher than 1 second.

>Release-Note:
>Audit-Trail:

From: dima@unixfreak.org (Dima Dorfman)
To: rboyd@pokerspot.com
Cc: freebsd-gnats-submit@freebsd.org
Subject: Re: docs/23502: date(1) doesn't detail kern_time.c securelevel check
Date: Tue, 12 Dec 2000 15:48:01 -0800 (PST)

 rboyd@pokerspot.com wrote:
 > 
 > 
 > >Number:         23502
 > >Category:       docs
 > >Synopsis:       date(1) doesn't detail kern_time.c securelevel check
 > >Description:
 > the securelevel check in kern_time.c is non-intuitive.  This should
 > be documented somewhere people would look when realizing they are
 > unable to set the date.  date(1) is probably the best candidate.
 
 This is documented in init(8), also known as securelevel(8) (see
 src/sbin/init/init.8 rev. 1.21).  This makes more sense than
 documenting it in date(1) since date(1) is by no means the only way to
 change the time.  People should read init(8) to realize the
 implications of raising the securelevel before they do it, anyway.
 
 Regards
 
 -- 
 Dima Dorfman <dima@unixfreak.org>
 Finger dima@unixfreak.org for PGP public key.
 
State-Changed-From-To: open->closed 
State-Changed-By: ben 
State-Changed-When: Wed Jan 17 21:28:54 GMT 2001 
State-Changed-Why:  
Restriction mentioned in date(1).  Thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=23502 
>Unformatted:
