OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: D J Hawkey Jr (hawkeydvisi.com)
Date: Sat Sep 08 2001 - 07:25:42 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Sep 08, at 02:17 PM, Alexander Langer wrote:
    >
    > Thus spake D J Hawkey Jr (hawkeydvisi.com):
    >
    > > If you're dealing with a "fixed purpose" server, the kernel may not
    > > need any KLD. On two of my servers, only blank_saver.ko is loaded,
    > > and that could be eliminated too, by not using a screensaver.
    >
    > This still lets you load own kernel modules.

    Not if you blow away the /modules directory (note that I haven't tried
    this).

    > And from what I've heard, there are also ways to load kernel modules
    > if securelevel > 1, though I can't imagine, how.

    Don't know.

    > Alex

    Dave

    -- 
      ______________________                         ______________________
      \__________________   \    D. J. HAWKEY JR.   /   __________________/
         \________________/\     hawkeydvisi.com    /\________________/
                          http://www.visi.com/~hawkeyd/
    

    To Unsubscribe: send mail to majordomoFreeBSD.org with "unsubscribe freebsd-security" in the body of the message