OpenBSD 3.5: a peek at another free Unix
Posted May 6, 2004 8:51 UTC (Thu) by eru
In reply to: OpenBSD 3.5: a peek at another free Unix
Parent article: OpenBSD 3.5: a peek at another free Unix
So, what stops the attacker who has gained root from, for example, unmounting the filesystem, change the flag in the filesystem by accessing the hd-partition directly, and then remounting the filesystem ?
This is where the securelevels come in. At higher securelevels, nobody, not even root, can access the disk directly. Have not used this myself, but read this from the "Absolute FreeBSD" book (FreeBSD has the same features).
to post comments)