From owner-freebsd-security  Thu Mar 11 16:16:45 1999
Delivered-To: freebsd-security@freebsd.org
Received: from bubba.whistle.com (s205m7.whistle.com [207.76.205.7])
	by hub.freebsd.org (Postfix) with ESMTP id AB77214D4D
	for <freebsd-security@FreeBSD.ORG>; Thu, 11 Mar 1999 16:16:39 -0800 (PST)
	(envelope-from archie@whistle.com)
Received: (from archie@localhost)
	by bubba.whistle.com (8.9.2/8.9.2) id QAA99619;
	Thu, 11 Mar 1999 16:15:04 -0800 (PST)
From: Archie Cobbs <archie@whistle.com>
Message-Id: <199903120015.QAA99619@bubba.whistle.com>
Subject: Re: FreeBSD SKIP port updated
In-Reply-To: <199903112358.KAA04856@frenzy.ct> from Mark Newton at "Mar 12, 99 10:28:01 am"
To: newton@camtech.com.au (Mark Newton)
Date: Thu, 11 Mar 1999 16:15:04 -0800 (PST)
Cc: ark@eltex.ru, freebsd-security@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL38 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Mark Newton writes:
>  > > I am curious if someone tried to update it to compile in-kernel.
>  > > I don't use LKMs, i have them disabled for security reasons (no flames
>  > > please)
>  > 
>  > Well, there's no reason you couldn't load it at boot time.
>  > Ie, add it to boot.conf (or loader.conf of whatever it's called).
> 
> If you have KLDs disabled that shouldn't work (and it represents a 
> pretty major security issue if it does!)

I thought the disabling of KLD's only blocked the kldload() process.
Guess not.

Hmm.. then I don't know. Maybe you could just stick it in your
kernel compilation directory and tweak the makefile...  ?

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message