From owner-freebsd-security Thu Mar 23 21:58:52 2000 Delivered-To: freebsd-security@freebsd.org Received: from rock.ghis.net (rock.ghis.net [209.222.164.7]) by hub.freebsd.org (Postfix) with ESMTP id E162437BB8B; Thu, 23 Mar 2000 21:58:48 -0800 (PST) (envelope-from will@blackdawn.com) Received: from shadow.blackdawn.com (postfix@[209.69.196.61]) by rock.ghis.net (8.9.3/8.9.3) with ESMTP id VAA51237; Thu, 23 Mar 2000 21:58:24 -0800 (PST) Received: by shadow.blackdawn.com (Postfix, from userid 1000) id 1EBC51ACC; Fri, 24 Mar 2000 00:58:22 -0500 (EST) Date: Fri, 24 Mar 2000 00:58:22 -0500 From: Will Andrews To: Kris Kennaway Cc: Olaf Hoyer , security@FreeBSD.ORG Subject: Re: New article Message-ID: <20000324005822.D91717@shadow.blackdawn.com> References: <4.1.20000324022914.00cbed30@mail.rz.fh-wilhelmshaven.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: ; from kris@FreeBSD.ORG on Thu, Mar 23, 2000 at 05:41:05PM -0800 X-Operating-System: FreeBSD 3.4-STABLE i386 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, Mar 23, 2000 at 05:41:05PM -0800, Kris Kennaway wrote: > This is why one of the first steps in securing that box should be to give > the modules the noschg flag. Hmm, probably this should be done by > default, like we noschg the kernel at install-time. ITYM "schg". I know the kernel is installed "schg", dunno about modules. I don't use those things anyway. :-) -- Will Andrews GCS/E/S @d- s+:+>+:- a--->+++ C++ UB++++ P+ L- E--- W+++ !N !o ?K w--- ?O M+ V-- PS+ PE++ Y+ PGP+>+++ t++ 5 X++ R+ tv+ b++>++++ DI+++ D+ G++>+++ e->++++ h! r-->+++ y? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message