summaryrefslogtreecommitdiff
path: root/libexec/rc/rc.d/securelevel
blob: c42a03534675c354a4c01e96d1706a3704dcdbd0 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
#!/bin/sh
#
# $FreeBSD$
#

# PROVIDE: securelevel
# REQUIRE: adjkerntz ipfw ipfilter pf

. /etc/rc.subr

name="securelevel"
desc="Securelevel configuration"
rcvar='kern_securelevel_enable'
start_cmd="securelevel_start"
stop_cmd=":"

# Last chance to set sysctl variables that failed the first time.
#
/etc/rc.d/sysctl lastload

securelevel_start()
{
	if [ ${kern_securelevel} -ge 0 ]; then
		echo 'Raising kernel security level: '
		${SYSCTL} kern.securelevel=${kern_securelevel}
	fi
}

load_rc_config $name
run_rc_command "$1"