178344Sobrien#!/bin/sh 278344Sobrien# 398184Sgordon# $FreeBSD$ 478344Sobrien# 578344Sobrien 678344Sobrien# PROVIDE: securelevel 7239568Sobrien# REQUIRE: adjkerntz ipfw ipfilter pf 878344Sobrien 978344Sobrien. /etc/rc.subr 1078344Sobrien 1178344Sobrienname="securelevel" 12124624Smtmrcvar='kern_securelevel_enable' 1378344Sobrienstart_cmd="securelevel_start" 1478344Sobrienstop_cmd=":" 1578344Sobrien 16124624Smtm# Last chance to set sysctl variables that failed the first time. 17124624Smtm# 18124624Smtm/etc/rc.d/sysctl lastload 19124624Smtm 2078344Sobriensecurelevel_start() 2178344Sobrien{ 22124624Smtm if [ ${kern_securelevel} -ge 0 ]; then 23124624Smtm echo 'Raising kernel security level: ' 24220153Semaste ${SYSCTL} kern.securelevel=${kern_securelevel} 25124624Smtm fi 2678344Sobrien} 2778344Sobrien 2878344Sobrienload_rc_config $name 2978344Sobrienrun_rc_command "$1" 30