Displaying 2 results from an estimated 2 matches for "klds".
Did you mean:
kids
2000 Dec 18
0
FreeBSD Security Advisory: FreeBSD-SA-00:77.procfs
...hese include the ability to "break out"
of the jail environment (jail is often used as a compartmentalization
tool for security purposes), to lower the system securelevel without
requiring a reboot, and to introduce new (possibly malicious) code
into the kernel on systems where loading of KLDs (kernel loadable
modules) has been disabled.
III. Impact
1) On vulnerable FreeBSD 4.x systems where procfs is mounted,
unprivileged local users can obtain root privileges.
2) On vulnerable FreeBSD 4.x and 3.x systems where procfs is mounted,
unprivileged local users can cause the system to hang....
2004 Sep 29
5
Kernel-loadable Root Kits
.../sys/i386/conf/NOTES,v
> retrieving revision 1.961
> diff -u -r1.961 NOTES
> --- sys/i386/conf/NOTES 2001/09/29 22:31:57 1.961
> +++ sys/i386/conf/NOTES 2001/10/04 08:07:51
> @@ -106,6 +106,10 @@
> #
> options ROOTDEVNAME=\"ufs:da0s2e\"
>
> +# This prevents KLDs from being loaded at all. For those who want the
> +# added security but cannot run at an elevated securelevel(8).
> +#options NO_KLD
> +
>
> #####################################################################
> # SMP OPTIONS:
> Index: sys/kern/kern_linker.c
> ========...