docs/58546: [patch] document how system security levels impact klds
Christian S.J.Peron
maneo at bsdpro.com
Sun Oct 26 01:50:24 UTC 2003
>Number: 58546
>Category: docs
>Synopsis: [patch] document how system security levels impact klds
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-doc
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Sat Oct 25 18:50:20 PDT 2003
>Closed-Date:
>Last-Modified:
>Originator: Christian S.J. Peron
>Release: FreeBSD 4.8-RELEASE-p13 i386
>Organization:
>Environment:
System: FreeBSD movl 4.8-RELEASE-p13 FreeBSD 4.8-RELEASE-p13 #1: Sat Oct 25 16:45:55 UTC 2003 cperon at movl:/usr/src/sys/compile/STAFF i386
>Description:
The kld(4) manual page does not document how system
security levels can impact the loading and unloadng of
kernel modules.
>How-To-Repeat:
N/A
>Fix:
--- share/man/man4/kld.4.old Sat Oct 25 19:38:06 2003
+++ share/man/man4/kld.4 Sat Oct 25 19:57:57 2003
@@ -88,6 +88,10 @@
.Xr kldstat 8
program is used to check the status of the modules currently loaded into the
system.
+.Pp
+Kernel modules may only be loaded or unloaded if the system security level
+.Dq kern.securelevel
+is less than one.
.Sh "MODULE TYPES"
.Bl -ohang
.It Em "Device Driver modules"
@@ -125,7 +129,8 @@
.Xr devd 8 ,
.Xr kldload 8 ,
.Xr kldstat 8 ,
-.Xr kldunload 8
+.Xr kldunload 8 ,
+.Xr sysctl 8
.Sh BUGS
If a module B, is dependent on another module A, but is not compiled with
module A as a dependency, then
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-doc
mailing list