Re: Should kernel modules be executable?

Reply: Dag-Erling_Smørgrav : "Re: Should kernel modules be executable?"
In reply to: Miroslav Lachman : "Should kernel modules be executable?"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Zhenlei Huang <zlei_at_FreeBSD.org>
Date: Thu, 02 Jan 2025 02:35:59 UTC


> On Jan 1, 2025, at 7:55 AM, Miroslav Lachman <000.fbsd@quip.cz> wrote:
> 
> I upgraded my desktop from FreeBSD 13.3 to 14.2 few days ago and noticed there is a huge difference in the permissions on the kernel modules in /boot/kernel.
> Previously there were about 25 files with permission r-xr-xr-x and 871 with other permissions (mainly -r--r--r--).
> But on the FreeBSD 14.2 (upgraded by freebsd-update), there are 809 files with r-xr-xr-x permission and only 66 with other permissions (63 with r--r--r--)

13.4 has the same permissions for kernel modules.

> 
> Why it was changed? I tought modules does not need to be executable.

Yes, indeed. The permission of kernel modules was changed from 555 to KMODMODE ( NOBINMODE, 444 ). See https://reviews.freebsd.org/D42768 for more context.

> 
> Kind regards
> Miroslav Lachman
> 
> 

Best regards,
Zhenlei