Re: CVS commit: src/sys/kern

[Andrew Doran <ad%netbsd.org@localhost>]

On Sat, Nov 15, 2008 at 04:14:31PM +1100, matthew green wrote:

>    Module Name:       src
>    Committed By:      ad
>    Date:              Fri Nov 14 22:00:23 UTC 2008
>    
>    Modified Files:
>       src/sys/kern: subr_kobj.c
>    
>    Log Message:
>    Use NOCHROOT when doing the lookup against the standard module path.
>    Prevents abuse of chroots to load tainted kernel modules.
> 
> 
> this also prevents the use of them to load untainted kernel modules.

You can load them manually as root. It prevents autoload within the chroot.
 
> how does this interact with sysctl init.chroot?

It doesn't, should it?

Andrew