Subject: securelevel
To: None <netbsd-users@NetBSD.org>
From: Aiko Barz <aiko@haeckser.de>
List: netbsd-users
Date: 10/24/2005 15:36:44
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigA6D14E5B921A6BE3042EAB44
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

I couldn't find any useful informations on the NetBSD website.
(http://www.google.com/search?q=site:www.netbsd.org+securelevel)

I did "echo securelevel=1 >> /etc/rc.conf". Am I right, that it is now
impossible to load any modules or write to /dev/mem or /dev/kmem?

Imho this is a keyfeature and could be part of the FAQ.
If you want to do this with Linux you have to disable module-support at
all. Furthermore you need the grsecurity[1] patch to disable write
access to /dev/mem and /dev/kmem.

Bye,
	Aiko

[1]: http://www.grsecurity.com/ (Latest stable patch is for 2.6.11.12.)
-- 
Aiko Barz <aiko@haeckser.de>
Web: http://www.haeckser.de

--------------enigA6D14E5B921A6BE3042EAB44
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDXOObpffSm174ExcRA52PAJ9I8d03p7nu3iK0APcVfRMdwwD+JgCfS7TP
QDFJqbb1GdrPIVaHPQH2N2Y=
=1rxu
-----END PGP SIGNATURE-----

--------------enigA6D14E5B921A6BE3042EAB44--