kern/45235: GENERIC can not have options MODULAR on sane archs

[martin%NetBSD.org@localhost]

>Number:         45235
>Category:       kern
>Synopsis:       GENERIC can not have options MODULAR on sane archs
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Wed Aug 10 09:15:00 +0000 2011
>Originator:     Martin Husemann
>Release:        NetBSD 5.99.55
>Organization:
The NetBSD Foundation, Inc.
>Environment:
System: NetBSD after-hours.aprisoft.de 5.99.55 NetBSD 5.99.55 (MODULAR) #40: 
Wed Aug 10 10:11:13 CEST 2011 
martin%after-hours.aprisoft.de@localhost:/usr/src/sys/arch/sparc64/compile/MODULAR
 sparc64
Architecture: sparc64
Machine: sparc64
>Description:

A "sane arch" (for purposes of this PR) is an arch that does not need
options INSECURE (i.e. for working X support).

In a non-INSECURE kernel we can not load file system modules when parsing
/etc/fstab, since securelevel is already preventing that.

We could reorder rc execution and fix securelevel later, but that would
still not fix things like

/dev/cd0a               /cdrom          cd9660  ro,noauto

(which we generate by default during install).

>How-To-Repeat:
s/a

>Fix:
Several options come to mind:
 - Create a security model where module auto loading is controlled differently
   (how?)
 - have the rc subsystem find all filesystems used in /etc/fstab (ignoring 
   noauto) and auto-manually load the required modules before changing
   securelevel
 - have the bootloader parse rootpartion:/etc/fstab and pre-load all needed
   modules

Maybe others?