Date: Mon, 25 May 1998 11:10:42 -0400 (EDT) From: woods@zeus.leitch.com (Greg A. Woods) To: ark@eltex.spb.ru Cc: freebsd-security@FreeBSD.ORG Subject: Re: Virus on FreeBSD Message-ID: <199805251510.LAA05638@brain.zeus.leitch.com> In-Reply-To: ark@eltex.spb.ru's message of "Fri, May 22, 1998 14:02:08 GMT" regarding "Re: Virus on FreeBSD" id <199805221402.OAA16417@paranoid.eltex.spb.ru> References: <199805211901.PAA23176@brain.zeus.leitch.com> <199805221402.OAA16417@paranoid.eltex.spb.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
[ On Fri, May 22, 1998 at 14:02:08 (GMT), ark@eltex.spb.ru wrote: ] > Subject: Re: Virus on FreeBSD > > 2.1.7.1 does not have NO_LKM option in LINT. Don't know if it does > something for that system. Looks like the RELENG_2_1_0 branch only has the changes to disallow LKM manipulations in "secure mode" (i.e. securelevel > 0) (prior to 2.1.5). RELENG_2_2 had the NO_LKM option pulled in as of 2.2.6. Now that I look at the way NO_LKM was implemented, I think it could be a *lot* more agressive in the amount of code it comments out. All it appears to do now is inhibit the initialization of the LKM "driver". -- Greg A. Woods +1 416 443-1734 VE3TCP <gwoods@acm.org> <robohack!woods> Planix, Inc. <woods@planix.com>; Secrets of the Weird <woods@weird.com> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199805251510.LAA05638>