Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Jul 1996 11:01:41 +0200 (CET)
From:      Zoltan Basti <zbs@softec.softec.sk>
To:        freebsd-security@freebsd.org
Subject:   securelevel and modload
Message-ID:   <9607021101.aa20796@softec.softec.sk>

next in thread | raw e-mail | index | archive | help

Hello there,

I think the FreeBSD kernel securelevel functionality together with
the schg and sappnd flags are a very good idea to make systems
more secure. I like the idea of unchangable securelevel,
unchangable flags etc. But I don't know whether this
all securelevel stuff can be eliminated by a 
loadable kernel module, which, say, changes the value of 
the variable securelevel. 

So what's the situation? 

Anyway, from a security point of view I would like to completely
disable loadable kernel modules. Is there a way to do it?

Thanks in advance,
-- 
Zoltan Basti



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi? <9607021101.aa20796>