From owner-freebsd-current Thu Nov 6 00:22:09 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id AAA00181 for current-outgoing; Thu, 6 Nov 1997 00:22:09 -0800 (PST) (envelope-from owner-freebsd-current) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by hub.freebsd.org (8.8.7/8.8.7) with SMTP id AAA00169 for ; Thu, 6 Nov 1997 00:22:03 -0800 (PST) (envelope-from j@uriah.heep.sax.de) Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id JAA17474 for freebsd-current@FreeBSD.ORG; Thu, 6 Nov 1997 09:22:02 +0100 Received: (from j@localhost) by uriah.heep.sax.de (8.8.7/8.8.5) id JAA20329; Thu, 6 Nov 1997 09:11:49 +0100 (MET) Message-ID: <19971106091149.JR42640@uriah.heep.sax.de> Date: Thu, 6 Nov 1997 09:11:49 +0100 From: j@uriah.heep.sax.de (J Wunsch) To: freebsd-current@FreeBSD.ORG Subject: Re: [Fwd: Malicious Linux modules - be worried !] References: <4473.878788874@time.cdrom.com> X-Mailer: Mutt 0.60_p2-3,5,8-9 Mime-Version: 1.0 X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) In-Reply-To: <4473.878788874@time.cdrom.com>; from Jordan K. Hubbard on Nov 5, 1997 20:01:14 -0800 Sender: owner-freebsd-current@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk As Jordan K. Hubbard wrote: > Perhaps we should add a hook to disable the > loading of LKMs entirely if the secure level is above a certain > number. You mean, something like these checks? :-) /sys/kern/kern_lkm.c: if ((flag & FWRITE) == 0 || securelevel > 0) /sys/kern/kern_lkm.c: if ((flag & FWRITE) == 0 || securelevel > 0) /sys/kern/kern_lkm.c: if ((flag & FWRITE) == 0 || securelevel > 0) /sys/kern/kern_lkm.c: if ((flag & FWRITE) == 0 || securelevel > 0) /sys/kern/kern_lkm.c: if ((flag & FWRITE) == 0 || securelevel > 0) -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)