Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Mar 2002 13:18:31 +0100 (CET)
From:      Harti Brandt <brandt@fokus.gmd.de>
To:        current@freebsd.org, <arr@freebsd.org>, <rwatson@freebsd.org>
Subject:   Rev. 1.82 of kern_linker.c disables module loads...
Message-ID:  <20020321131551.T18713-100000@beagle.fokus.gmd.de>

next in thread | raw e-mail | index | archive | help

Hello,

This revision of kern_linker.c entirly disables module loads from /etc/rc
during boot:

revision 1.82
date: 2002/03/20 16:03:42;  author: arr;  state: Exp;  lines: +10 -6
- Change a check of securelevel to securelevel_gt() call in order to help
  against users within a jail attempting to load kernel modules.
- Add a check of securelevel_gt() to vfs_mount() in order to chop some
  low hanging fruit for the repair of securelevel checking of linking and
  unlinking files from within jails.  There is more to be done here.

Reviewed by: rwatson

Regards,
harti
-- 
harti brandt, http://www.fokus.gmd.de/research/cc/cats/employees/hartmut.brandt/private
              brandt@fokus.fhg.de


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020321131551.T18713-100000>