Date: Mon, 20 May 1996 13:59:10 -0500 From: Alex Nash <alex@fa.tdktca.com> To: Garrett Wollman <wollman@lcs.mit.edu> Cc: hackers@freebsd.org Subject: Re: unionfs Message-ID: <31A0C0FE.1CE1BCE0@fa.tdktca.com> References: <199605201850.NAA31412@orion.fa.tdktca.com> <9605201850.AA22618@halloran-eldar.lcs.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Garrett Wollman wrote: > > Since modload opens a character device which is not a disk device, > > I don't think securelevel prevents LKMs from being loaded (but I > > agree that it should). > > > What did I miss? > > kern/kern_lkm.c specifically inspects securelevel and denies write > access when >0. > > ------------------------------------ > if ((flag & FWRITE) == 0 || securelevel > 0) > /* only allow this if writing and insecure */ > return EPERM; > ------------------------------------ At first I couldn't believe I'd missed this, but it turns out this code is only in -current. Can someone add this to -stable? Alex
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?31A0C0FE.1CE1BCE0>