Date: Fri, 28 Dec 2001 22:30:12 -0800 From: "Crist J . Clark" <cjc@FreeBSD.ORG> To: measl@mfn.org Cc: Simon Siemonsma <s.siemonsma@hccnet.nl>, freebsd-questions@FreeBSD.ORG Subject: Re: Disabling KLDs Message-ID: <20011228223012.E93411@blossom.cjclark.org> In-Reply-To: <Pine.BSF.4.21.0112282007060.283-100000@greeves.mfn.org>; from measl@mfn.org on Fri, Dec 28, 2001 at 08:09:08PM -0600 References: <200112282153.WAA12249@smtp.hccnet.nl> <Pine.BSF.4.21.0112282007060.283-100000@greeves.mfn.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Dec 28, 2001 at 08:09:08PM -0600, measl@mfn.org wrote:
>
> We use securelevels on all of our FBSD boxes already. A look at the man
> pages for KLD does not indicate to me that KLDs are disabled by
> securelevels. If I am misunderstanding what they are saying, I would
> certainly appreciate a pointer in the right direction :-)
$ man securelevel
...
1 Secure mode - the system immutable and system append-only flags may
not be turned off; disks for mounted filesystems, /dev/mem, and
/dev/kmem may not be opened for writing; kernel modules (see
kld(4)) may not be loaded or unloaded.
--
"It's always funny until someone gets hurt. Then it's hilarious."
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011228223012.E93411>