From owner-cvs-all@FreeBSD.ORG Wed Jul 14 00:35:17 2004 Return-Path: Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A7B4F16A4CE; Wed, 14 Jul 2004 00:35:17 +0000 (GMT) Received: from pd3mo3so.prod.shaw.ca (shawidc-mo1.cg.shawcable.net [24.71.223.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 04B4D43D3F; Wed, 14 Jul 2004 00:35:15 +0000 (GMT) (envelope-from colin.percival@wadham.ox.ac.uk) Received: from pd4mr7so.prod.shaw.ca (pd4mr7so-qfe3.prod.shaw.ca [10.0.141.84])2003)) with ESMTP id <0I0T00DHVFXJBE@l-daemon>; Tue, 13 Jul 2004 18:27:19 -0600 (MDT) Received: from pn2ml5so.prod.shaw.ca ([10.0.121.149]) by pd4mr7so.prod.shaw.ca (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0I0T001J5FXHLHI0@pd4mr7so.prod.shaw.ca>; Tue, 13 Jul 2004 18:27:17 -0600 (MDT) Received: from piii600.wadham.ox.ac.uk (S0106006067227a4a.vc.shawcable.net [24.87.233.42])2003)) with ESMTP id <0I0T00I43FXFN7@l-daemon>; Tue, 13 Jul 2004 18:27:17 -0600 (MDT) Date: Tue, 13 Jul 2004 17:26:16 -0700 From: Colin Percival In-reply-to: <25281.1089751843@critter.freebsd.dk> X-Sender: cperciva@popserver.sfu.ca (Unverified) To: Poul-Henning Kamp Message-id: <6.1.0.6.1.20040713171800.03d86568@popserver.sfu.ca> MIME-version: 1.0 X-Mailer: QUALCOMM Windows Eudora Version 6.1.0.6 Content-type: text/plain; charset=us-ascii References: <25281.1089751843@critter.freebsd.dk> cc: cvs-src@FreeBSD.org cc: src-committers@FreeBSD.org cc: cvs-all@FreeBSD.org cc: Nate Lawson Subject: Re: cvs commit: src/sbin/kldunload kldunload.8 kldunload.c X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Jul 2004 00:35:17 -0000 At 13:50 13/07/2004, Poul-Henning Kamp wrote: >But I think you miss the point: This is about giving root the ability >to add a "damnit!" after "kldunload foo". As a (mostly) side note, this will be useful from the point of view of security as well. When there is a security advisory concerning an optional module (compat/linux being the most recent example) it would be nice to have a more effective workaround than "well, you can try `kldunload linux`, but it probably won't work... if it doesn't work, you'll have to reboot the system". Colin Percival