Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 2 Jan 2025 10:35:59 +0800
From:      Zhenlei Huang <zlei@FreeBSD.org>
To:        Miroslav Lachman <000.fbsd@quip.cz>
Cc:        FreeBSD-STABLE Mailing List <freebsd-stable@freebsd.org>
Subject:   Re: Should kernel modules be executable?
Message-ID:  <10B8CED2-104F-4047-AED0-2B270CECB258@FreeBSD.org>
In-Reply-To: <5120eb91-86c1-4c60-8d73-cbc46689669a@quip.cz>
References:  <5120eb91-86c1-4c60-8d73-cbc46689669a@quip.cz>

next in thread | previous in thread | raw e-mail | index | archive | help


> On Jan 1, 2025, at 7:55 AM, Miroslav Lachman <000.fbsd@quip.cz> wrote:
>=20
> I upgraded my desktop from FreeBSD 13.3 to 14.2 few days ago and =
noticed there is a huge difference in the permissions on the kernel =
modules in /boot/kernel.
> Previously there were about 25 files with permission r-xr-xr-x and 871 =
with other permissions (mainly -r--r--r--).
> But on the FreeBSD 14.2 (upgraded by freebsd-update), there are 809 =
files with r-xr-xr-x permission and only 66 with other permissions (63 =
with r--r--r--)

13.4 has the same permissions for kernel modules.

>=20
> Why it was changed? I tought modules does not need to be executable.

Yes, indeed. The permission of kernel modules was changed from 555 to =
KMODMODE ( NOBINMODE, 444 ). See https://reviews.freebsd.org/D42768 for =
more context.

>=20
> Kind regards
> Miroslav Lachman
>=20
>=20

Best regards,
Zhenlei




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?10B8CED2-104F-4047-AED0-2B270CECB258>