Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Sep 1999 16:00:14 -0600
From:      Brett Glass <brett@lariat.org>
To:        "Matthew D. Fuller" <fullermd@futuresouth.com>
Cc:        "Harry M. Leitzell" <Harry_M_Leitzell@cmu.edu>, Liam Slusser <liam@tiora.net>, Kenny Drobnack <kdrobnac@mission.mvnc.edu>, security@FreeBSD.ORG
Subject:   Re: Securing a system that's been rooted remotely (Was: BPF on in 3.3-RC GENERIC kernel)
Message-ID:  <4.2.0.58.19990917155850.047bd680@localhost>
In-Reply-To: <19990917134343.P16305@futuresouth.com>
References:  <4.2.0.58.19990916232349.047c27a0@localhost> <4.2.0.58.19990916185341.00aaf100@localhost> <Pine.SOL.3.96L.990916210821.19993A-100000@unix8.andrew.cmu .edu> <4.2.0.58.19990916232349.047c27a0@localhost>

next in thread | previous in thread | raw e-mail | index | archive | help
At 01:43 PM 9/17/99 -0500, Matthew D. Fuller wrote:

>I can't imagine anyone who would need and use a high securelevel like
>that, and still run a GENERIC kernel.  If they do, then their worldview
>would seem to be slightly skewed.  I run a custom (2.1.5-REL) kernel on
>musca, which is a 386 SX/20.  It took 6 hours to compile.  On mortis
>(4.0-CURRENT) a kernel takes approx. 2 minutes to compile.  This is not a
>major time investment.

If securelevel isn't set high, a hacker can switch you BACK to the generic
kernel with a few keystrokes.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.2.0.58.19990917155850.047bd680>