From owner-freebsd-questions Fri Dec 28 18: 9:34 2001 Delivered-To: freebsd-questions@freebsd.org Received: from cliff.mfn.org (cliff.mfn.org [204.238.179.8]) by hub.freebsd.org (Postfix) with ESMTP id D214D37B41A for ; Fri, 28 Dec 2001 18:09:27 -0800 (PST) Received: from greeves.mfn.org (greeves.mfn.org [204.238.179.3]) by cliff.mfn.org (8.11.1/8.9.3) with ESMTP id fBT298I04243; Fri, 28 Dec 2001 20:09:09 -0600 (CST) (envelope-from measl@mfn.org) Date: Fri, 28 Dec 2001 20:09:08 -0600 (CST) From: To: Simon Siemonsma Cc: freebsd-questions@freebsd.org Subject: Re: Disabling KLDs In-Reply-To: <200112282153.WAA12249@smtp.hccnet.nl> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG We use securelevels on all of our FBSD boxes already. A look at the man pages for KLD does not indicate to me that KLDs are disabled by securelevels. If I am misunderstanding what they are saying, I would certainly appreciate a pointer in the right direction :-) Thanks! On Fri, 28 Dec 2001, Simon Siemonsma wrote: > Have a look at kernel securitylevels. > > Simon Siemonsma > > On Friday 28 December 2001 20:31, you wrote: > > Greetings, > > > > In the 3.x days you could specify an "options" statement to disable > > kernel LKM functionality. I have looked in the kernel LINT, and the man > > pages / handbook, and see no equivalent for disabling KLDs. > > > > Is there any "clean" way to do this, or do I need to go through the source > > tree and start cutting? > > > > Please reply directly, as I am not subscribed to "questions". > > > > Thanks! > -- Yours, J.A. Terranson sysadmin@mfn.org If Governments really want us to behave like civilized human beings, they should give serious consideration towards setting a better example: Ruling by force, rather than consensus; the unrestrained application of unjust laws (which the victim-populations were never allowed input on in the first place); the State policy of justice only for the rich and elected; the intentional abuse and occassionally destruction of entire populations merely to distract an already apathetic and numb electorate... This type of demogoguery must surely wipe out the fascist United States as surely as it wiped out the fascist Union of Soviet Socialist Republics. The views expressed here are mine, and NOT those of my employers, associates, or others. Besides, if it *were* the opinion of all of those people, I doubt there would be a problem to bitch about in the first place... -------------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message