From owner-freebsd-current  Thu Mar 21  9:39:27 2002
Delivered-To: freebsd-current@freebsd.org
Received: from obsecurity.dyndns.org (adsl-64-165-226-239.dsl.lsan03.pacbell.net [64.165.226.239])
	by hub.freebsd.org (Postfix) with ESMTP
	id 209D637B419; Thu, 21 Mar 2002 09:39:21 -0800 (PST)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id BD76966C39; Thu, 21 Mar 2002 09:39:19 -0800 (PST)
Date: Thu, 21 Mar 2002 09:39:19 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: "Michael D. Harnois" <mharnois@cpinternet.com>
Cc: thomas@cuivre.fr.eu.org, Harti Brandt <brandt@fokus.gmd.de>,
	current@FreeBSD.ORG, arr@FreeBSD.ORG, rwatson@FreeBSD.ORG
Subject: Re: Rev. 1.82 of kern_linker.c disables module loads...
Message-ID: <20020321093919.A63997@xor.obsecurity.org>
References: <20020321131551.T18713-100000@beagle.fokus.gmd.de> <20020321140225.A76705@melusine.cuivre.fr.eu.org> <1016721888.495.0.camel@mharnois.mdharnois.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="vtzGhvizbBRQ85DL"
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <1016721888.495.0.camel@mharnois.mdharnois.net>; from mharnois@cpinternet.com on Thu, Mar 21, 2002 at 08:44:48AM -0600
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG


--vtzGhvizbBRQ85DL
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Mar 21, 2002 at 08:44:48AM -0600, Michael D. Harnois wrote:
> On Thu, 2002-03-21 at 07:02, Thomas Quinot wrote:
>=20
> > Le 2002-03-21, Harti Brandt =E9crivait :
> >=20
> > > This revision of kern_linker.c entirly disables module loads from /et=
c/rc
> > > during boot:
> >=20
> > Or even after boot. Confirmed here: kldload always returns 'Operation
> > not permitted'.
>=20
> Here as well.

At least it's more secure this way.

Kris

--vtzGhvizbBRQ85DL
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE8mhrHWry0BWjoQKURAmWuAJ9kL5FyssXrtunVnxzN1u6vONRQdgCfU5Yk
dAUVXmn3HsE1T5wGii3LS+A=
=0tNW
-----END PGP SIGNATURE-----

--vtzGhvizbBRQ85DL--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message