Check for secure level since ezjail will fail if it is -gt 0

1 files changed, 3 insertions, 0 deletions

diff --git a/ezjail-admin b/ezjail-admin
index 9e4e8f7..de91655 100755
--- a/ezjail-admin
+++ b/ezjail-admin
@@ -523,6 +523,7 @@ setup|update)
     # Bump the user for some of the most common errors
     [ -d ${ezjail_sourcetree} ] || exerr "Cannot find your copy of the FreeBSD source tree in ${ezjail_sourcetree}."
     [ -e ${ezjail_sourcetree}/Makefile ] || exerr "Your source tree in ${ezjail_sourcetree} seems to be incomplete (Makefile missing)."
+    [ "`sysctl -n kern.securelevel`" -gt 0 ] || exerr "You're running in a secure level higher than 0. ezjail will not run correctly."
 
     # Normally fulljail should be renamed by past ezjail-admin commands.
     # However those may have failed
@@ -562,6 +563,8 @@ install)
   ezjail_dir=${ezjail_ftphost#file://}
   [ "${ezjail_dir%%[!/]*}" ] || ezjail_reldir=${PWD}
 
+  [ "`sysctl -n kern.securelevel`" -gt 0 ] || exerr "You're running in a secure level higher than 0. ezjail will not run correctly."
+
   # ftp servers normally wont provide non-RELEASE-builds
   if [ -z "${ezjail_release}" -a "${ezjail_dir}" = "${ezjail_ftphost}" ]; then
     ezjail_release=`uname -r`