|
Email lists >
>
Re: Secmodel_bsd44: default to "defer", not "deny"? >
Re: Secmodel_bsd44: default to "defer", not "deny"?
Re: Secmodel_bsd44: default to "defer", not "deny"?
This post if a part of this thread
|
2008-02-25 16:10:54 |
|
|
Re: Secmodel_bsd44: default to "defer", not "deny"?
|
Bill Stouder-Studenmund wrote:
> A default answer of "defer" is more-correct
that what happens now. Making
> this change strikes me as the right thing to do. It
also will serve as a
> good example for future module-authors.
>
> Also, the fact that root was able to load modules at
boot doesn't mean
> that root can load modules (and thus kmem is writable)
later. Isn't
> that the reason we talked about securelevel and
capabilities and the
> inability to re-enable "capabilities" that we
disable towards the end of
> boot?
Right.
I'll wait a couple of days and change it.
Thanks,
-e.
|
|
|
|
|
|
about | contact Other archives ( Real Estate discussion Medical topics )
|