From owner-freebsd-questions  Fri Mar  7 16:36:12 2003
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2C06537B401
	for <freebsd-questions@freebsd.org>; Fri,  7 Mar 2003 16:36:11 -0800 (PST)
Received: from smtp.acd.net (smtp.acd.net [207.179.64.154])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2962E43F75
	for <freebsd-questions@freebsd.org>; Fri,  7 Mar 2003 16:36:10 -0800 (PST)
	(envelope-from taxman@ACD.NET)
Received: from 207.179.85.14 ([207.179.85.14]) by smtp.acd.net with Microsoft SMTPSVC(5.0.2195.5329);
	 Fri, 7 Mar 2003 19:36:05 -0500
From: taxman <taxman@acd.net>
To: Simon Barner <barner@in.tum.de>, freebsd-questions@freebsd.org
Subject: Re: A question about kernel modules
Date: Fri, 7 Mar 2003 19:38:53 -0500
User-Agent: KMail/1.5
References: <200303071155.43785.damien@tougas.net> <200303071807.27524.taxman@acd.net> <20030307231822.GB1340@zi025.glhnet.mhn.de>
In-Reply-To: <20030307231822.GB1340@zi025.glhnet.mhn.de>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200303071938.53505.taxman@acd.net>
X-OriginalArrivalTime: 08 Mar 2003 00:36:06.0098 (UTC) FILETIME=[B4871320:01C2E50A]
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Friday 07 March 2003 06:18 pm, Simon Barner wrote:
> > So optimal security would be have every
> > needed component compiled in, and turn off the ability to load any
> > modules. I have no idea if this can be done or how in FreeBSD.
>
> This is what securelevel(8) is about:

ahh yes, that seems pretty obvious in retrospect.  :) Thanks.
Another example of my incredible ability to understand the conceptual side of 
info sec., and not be able to implement much of it.  oh well, it helps when 
you have nothing terribly important to protect!  :) 

> > http://packetstorm.decepticons.org/papers/unix/bsdkern.htm
>
> Ah, interesting one! Thanks :-)

np

Tim

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message