From owner-freebsd-questions@FreeBSD.ORG Fri Sep 17 13:47:06 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8F3D416A4CE for ; Fri, 17 Sep 2004 13:47:06 +0000 (GMT) Received: from mail.gmx.net (pop.gmx.de [213.165.64.20]) by mx1.FreeBSD.org (Postfix) with SMTP id 64ED843D2D for ; Fri, 17 Sep 2004 13:47:05 +0000 (GMT) (envelope-from michael.ross@gmx.net) Received: (qmail 24969 invoked by uid 65534); 17 Sep 2004 13:47:04 -0000 Received: from dynadsl-213-168-221-126.ewe-ip-backbone.de (EHLO [192.168.0.20]) (213.168.221.126) by mail.gmx.net (mp019) with SMTP; 17 Sep 2004 15:47:04 +0200 X-Authenticated: #11429267 Message-ID: <414AEAD1.5030305@gmx.net> Date: Fri, 17 Sep 2004 15:46:57 +0200 From: Michael Ross User-Agent: Mozilla Thunderbird 0.8 (X11/20040913) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Omer Faruk Sen References: <20040917122940.62286.qmail@istanbul.enderunix.org> In-Reply-To: <20040917122940.62286.qmail@istanbul.enderunix.org> Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: Re: options NO_LKM? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Sep 2004 13:47:06 -0000 Omer Faruk Sen wrote: > > I have seen that NO_LKM option has been removed (a long time ago ) > from supported options in kernel config file. > I want to disable kernel module loading in my system. Is there a way > for that? You can do that with securelevels: see man securelevel 1 Secure mode - the system immutable and system append-only flags may not be turned off; disks for mounted file systems, /dev/mem, and /dev/kmem may not be opened for writing; kernel modules (see kld(4)) may not be loaded or unloaded. Michael