Re: Should kernel modules be executable?

From: Dag-Erling_Smørgrav <des_at_FreeBSD.org>
Date: Thu, 02 Jan 2025 09:05:46 UTC
Zhenlei Huang <zlei@FreeBSD.org> writes:
> Miroslav Lachman <000.fbsd@quip.cz> writes:
> > Previously there were about 25 files with permission r-xr-xr-x and
> > 871 with other permissions (mainly -r--r--r--).
> > But on the FreeBSD 14.2 (upgraded by freebsd-update), there are 809
> > files with r-xr-xr-x permission and only 66 with other permissions
> > (63 with r--r--r--)
> Yes, indeed. The permission of kernel modules was changed from 555 to
> KMODMODE ( NOBINMODE, 444 ). See https://reviews.freebsd.org/D42768
> for more context.

And yet the observed change is the opposite.

Looking at a 14.2 kernel tarball, the modules are not executable, but on
a 14.2 system updated from an earlier release using freebsd-update, they
are.

DES
-- 
Dag-Erling Smørgrav - des@FreeBSD.org