Klemens Nanni <klemens@posteo.de> wrote:

> 3/7/24 07:03, Theo de Raadt пишет:
> > Another point:
> > 
> > Doing this in userland is a race.  If anything is going to do it,
> > it should be the kernel preventing this itself.
> 
> Correct.  I came up with an ugly, but working diff sometime ago that
> did not make it as we didn't find a better way with less reach arounds.
> 
> I'll put that back on top of my list after release.

How does disklabel handle it?  I think it doesn't handle it.

It was one of the defining features of the original securelevels
subsystem, and had to be removed because it made it impossible to
manage media on the fly.  It made it impossible to build install media
with vnd(4), it was just too cumbersome.

I think disklabel and bioctl should work similar..