Solved Secure level 1 prevents wifi firmware from loading

fmc000 said:
This thread is hilarious.
Click to expand...
Yes it is.
secure level has been around in FreeBSD for a long time, to my knowledge the definition of "what is allowed at any level" has not changed. I've got a book on my shelf "FreeBSD and OpenBSD Security" by Korff, Hope and Potter dated 2005 that talks about secure level.
We've all probably mucked with it at one point in time because it sounded cool. Then we learned "it's cool but there is a cost".

OP is learning the cost of it; only person that can determine if the cost is worth it is the OP.
So yes securelevel can be for desktops but one must be prepared to pay the cost and the minimal cost is "can't load firmware/driver type stuff" That may include bits for video drivers so that X won't run :)
 
loveydovey said:
Because who's gonna switch to FreeBSD from Linux if there's no way to unplug and plug your USB Wifi adapter back in? Maybe there's a way to allow very specific firmware to load with securelevel 1?
Click to expand...
These are 2 distinct conditions.
If one is NOT at securelevel 1 you should be able to unplug/plug your USB WiFi adaptor and have it work (I don't have or use one so can't verify which is why I say should".
Running at securelevel 1 you are obligated to playing within the securelevel 1 rules.

So live within the rules or not.
 
mer said:
secure level has been around in FreeBSD for a long time
Click to expand...
As far back as I can remember. First mention of it seems to be the 4.0 man page of security(7). But it may have been available on earlier versions. Can't remember, it's been more than 25 years ago.
 
loveydovey said:
This is so wrong on so many levels. No, securelevel is for desktops too.
Click to expand...
Okay, so you don't know what the security level really is and what it really does. Yet you claim it is wrong. Yes, it is for desktops also, but it is meant to prevent evil people from doing what evil people do.
 
loveydovey said:
Are you we allowed to speak up against authority? 📣📣📣? (🎷🎙️📞🤳📶📵?)
There can be a securelevel added between 0 and 1 to allow more flexibility - without sacrificing anything.
Click to expand...
You can yell into the void as much as you want; but don't get upset if the void ignores you. Typically the more emojis, the more the void ignores.

I've been doing this computer stuff for a long time: flexibility means sacrificing security. Not just in software/computers, but in pretty much everything one wants to make more secure.
Your house: locks and deadbolts are more secure, but less flexible (conveinent).
So lets add electronic locks and an app, map maybe is more flexible and equal security at first blush, but can you guarantee that the app is secure?

In all walks of life, in all contexts, flexibility/ease of use is at odds with security.
 
this is one of the things we tell people who ask us "why do you use freebsd". "because we can trace the lineage of the tools we use all the way back to individual gays at the university of berkeley"
 
You must log in or register to reply here.
Back
Top