Blueprints: OpenBSD loadable kernel modules

23

Author: JT Smith

DaemonNews: “A caveat of loadable modules is the security risk they present. They open a wide range of possibilities to a malicious superuser, and can be very hard to detect. As such, modules cannot be loaded or unloaded
at a securelevel greater than 0. If you are a system administrator and wish to have a module loaded, you can add an entry to /etc/rc.securelevel to load the module before the securelevel rises. If you are working
on the development of a module, you will probably want to run at securelevel -1, again, this can be set by editing /etc/rc.securelevel.”

Category:

  • Unix