Actually, I seem to have just installed a kernel with 'securelevel=3' while running multiuser. This is today's -current on i386. X would not start with 'securelevel=3', but portsnap and portupgrade run. Darrel