Date: Thu, 12 Dec 1996 13:35:47 -0600 (CST) From: Brian Mitchell <brian@saturn.net> To: Brian Tao <taob@io.org> Cc: FREEBSD-SECURITY-L <freebsd-security@freebsd.org> Subject: Re: Risk of having bpf0? (was URGENT: Packet sniffer found on my system) Message-ID: <Pine.BSI.3.95.961212133458.3607C-100000@redmare.com> In-Reply-To: <Pine.BSF.3.95.961212140716.27209B-100000@nap.io.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 12 Dec 1996, Brian Tao wrote:
> On Wed, 11 Dec 1996, Brian Mitchell wrote:
> >
> > If you disable it, remember to take lkm out with it.
>
> How do you disable lkm? I don't see any option in the LINT config
> to do so. I could delete /lkm and mod{load,unload,stat}, but they can
> be easily replaced by an intruder.
In securelevel 2, (k)mem is not writable; I'm guessing this will cripple
lkm, although I am not possitive.
Brian Mitchell / brian@saturn.net
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.3.95.961212133458.3607C-100000>