From owner-freebsd-security  Fri Oct  5 13:22:33 2001
Delivered-To: freebsd-security@freebsd.org
Received: from aries.ai.net (aries.ai.net [205.134.163.4])
	by hub.freebsd.org (Postfix) with ESMTP id 002C137B401
	for <freebsd-security@FreeBSD.ORG>; Fri,  5 Oct 2001 13:22:29 -0700 (PDT)
Received: from blood (pool-138-88-103-108.res.east.verizon.net [138.88.103.108])
	by aries.ai.net (8.9.3/8.9.3) with SMTP id QAA16646;
	Fri, 5 Oct 2001 16:35:27 -0400 (EDT)
	(envelope-from deepak@ai.net)
Reply-To: <deepak@ai.net>
From: "Deepak Jain" <deepak@ai.net>
To: <cjclark@alum.mit.edu>, "Peter Chiu" <pccb@yahoo.com>
Cc: "D J Hawkey Jr" <hawkeyd@visi.com>,
	"Alexander Langer" <alex@big.endian.de>,
	<freebsd-security@FreeBSD.ORG>
Subject: RE: Kernel-loadable Root Kits
Date: Fri, 5 Oct 2001 16:24:44 -0400
Message-ID: <GPEOJKGHAMKFIOMAGMDIMEHAGAAA.deepak@ai.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Importance: Normal
In-Reply-To: <20011004232108.L297@blossom.cjclark.org>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


Thanks Crist,

	This is a significant kiddie protection item and I for one would like to
see it committed to future FreeBSD releases. [in case the patch stops
working on a future code rev].

Deepak

-----Original Message-----
From: Crist J. Clark [mailto:cristjc@earthlink.net]
Sent: Friday, October 05, 2001 2:21 AM
To: Peter Chiu
Cc: D J Hawkey Jr; cjclark@alum.mit.edu; Alexander Langer;
deepak@ai.net; freebsd-security@FreeBSD.ORG
Subject: Re: Kernel-loadable Root Kits


On Thu, Oct 04, 2001 at 07:02:51PM -0400, Peter Chiu wrote:
> Hello Crist,
>
> I love this idea. However, how does it affect vinum?
>
> Extracted from LINT
> # Configuring Vinum into the kernel is not necessary, since the kld
> # module gets started automatically when vinum(8) starts.  This
> # device is also untested.  Use at your own risk.
> #

I like I said, this will prevent you from loading KLDs. (period)
--
Crist J. Clark                           cjclark@alum.mit.edu
                                         cjclark@jhu.edu
                                         cjc@freebsd.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message