From owner-freebsd-hackers Sat Sep 8 2:45:59 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from ringworld.nanolink.com (sentinel.office1.bg [217.75.135.254]) by hub.freebsd.org (Postfix) with SMTP id 651C937B407 for ; Sat, 8 Sep 2001 02:45:50 -0700 (PDT) Received: (qmail 9160 invoked by uid 1000); 8 Sep 2001 09:45:28 -0000 Date: Sat, 8 Sep 2001 12:45:28 +0300 From: Peter Pentchev To: Deepak Jain Cc: freebsd-security@freebsd.org, "freebsd-hackers@FreeBSD. ORG" Subject: Re: Kernel-loadable Root Kits Message-ID: <20010908124528.D2176@ringworld.oblivion.bg> Mail-Followup-To: Deepak Jain , freebsd-security@freebsd.org, "freebsd-hackers@FreeBSD. ORG" References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from deepak@ai.net on Sat, Sep 08, 2001 at 05:43:41AM -0400 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sat, Sep 08, 2001 at 05:43:41AM -0400, Deepak Jain wrote: > > Short question: > > Is there a way to prevent the kernel from allowing loadable modules? Run your system in securelevel 1 or higher. See the init(8) manual page and the kern_securelevel_enable and kern_securelevel variables in the rc.conf(5) manual page. G'luck, Peter -- .siht ekil ti gnidaer eb d'uoy ,werbeH ni erew ecnetnes siht fI To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message