This constitutes illigitimate use of superpowers, in my book. Clear such things with your coadmins in advance. If you cannot trust them to stick with your policy decisions, then they should not have root in the first place. And if you actually give them root, then you've really shot your self in the foot, which Unix is supposed to do without asking any questions, provided you point the gun in that direction, and pull the trigger.

You rewrite the securelevel code, or pay someone to do so. Or, as a very, very limited way of making it more work for the would-be snooper, you could remove the snoop module and sources. Not that it would be any work for them to get hold of it anyhow. And, as DCS stated, there are pre-made klds out there which would assist them better in this illegitimate use, anyhow.

Marius

To Unsubscribe: send mail to majo...@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message