Date: Tue, 13 Jul 2004 20:38:56 -0400 From: Brian Fundakowski Feldman <green@FreeBSD.org> To: Colin Percival <colin.percival@wadham.ox.ac.uk> Cc: Nate Lawson <nate@root.org> Subject: Re: cvs commit: src/sbin/kldunload kldunload.8 kldunload.c Message-ID: <20040714003856.GR1626@green.homeunix.org> In-Reply-To: <6.1.0.6.1.20040713171800.03d86568@popserver.sfu.ca> References: <25281.1089751843@critter.freebsd.dk> <6.1.0.6.1.20040713171800.03d86568@popserver.sfu.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 13, 2004 at 05:26:16PM -0700, Colin Percival wrote: > At 13:50 13/07/2004, Poul-Henning Kamp wrote: > >But I think you miss the point: This is about giving root the ability > >to add a "damnit!" after "kldunload foo". > > As a (mostly) side note, this will be useful from the point of view of > security as well. When there is a security advisory concerning an > optional module (compat/linux being the most recent example) it would > be nice to have a more effective workaround than "well, you can try > `kldunload linux`, but it probably won't work... if it doesn't work, > you'll have to reboot the system". "Well, you can try 'kldunload -f linux', but it probably won't work... if it doesn't work, I guess a crash isn't really much worse than a reboot." -- Brian Fundakowski Feldman \'[ FreeBSD ]''''''''''\ <> green@FreeBSD.org \ The Power to Serve! \ Opinions expressed are my own. \,,,,,,,,,,,,,,,,,,,,,,\
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040714003856.GR1626>