Date: Fri, 17 Sep 2004 15:46:57 +0200 From: Michael Ross <michael.ross@gmx.net> To: Omer Faruk Sen <ofsen@enderunix.org> Cc: freebsd-questions@freebsd.org Subject: Re: options NO_LKM? Message-ID: <414AEAD1.5030305@gmx.net> In-Reply-To: <20040917122940.62286.qmail@istanbul.enderunix.org> References: <20040917122940.62286.qmail@istanbul.enderunix.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Omer Faruk Sen wrote:
>
> I have seen that NO_LKM option has been removed (a long time ago )
> from supported options in kernel config file.
> I want to disable kernel module loading in my system. Is there a way
> for that?
You can do that with securelevels:
see
man securelevel
1 Secure mode - the system immutable and system append-only
flags may
not be turned off; disks for mounted file systems, /dev/mem, and
/dev/kmem may not be opened for writing; kernel modules (see
kld(4)) may not be loaded or unloaded.
Michael
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?414AEAD1.5030305>