On Fri, 27 Jul 2012 13:57:52 +0000 (UTC)
Geoff Wing <ma...@primenet.com.au> wrote:

> John Nemeth <jnem...@victoria.tc.ca> typed:
> : ...... Being able to properly unload a built-in module would be a nice
> : feature.
> 
> This sounds a bit like a possible security problem, though 
> presumably/hopefully
> limited by the current security level and AAA.

Do you mean in the case an external module could then be loaded instead
of a built-in one?  Probably that someone who wants to prevent the
kernel from loading external modules would use a kernel without
MODULAR, or change the runlevel.

This reminds me though: why/how does sysctl/kern.module.autoload
default to 1 for non-MODULAR kernels (at least on netbsd-6)?  Or an
alternative question: are these sysctl knobs useful at all with
non-MODULAR kernels, or are they then artifacts?

Thanks,
-- 
Matt

Reply via email to