options NO_LKM?

[Michael Ross]

Omer Faruk Sen wrote:

>
> I have seen that NO_LKM option has been removed (a long time ago ) 
> from supported options in kernel config file.
> I want to disable kernel module loading in my system. Is there a way 
> for that?


You can do that with securelevels:

see
  man securelevel

    1     Secure mode - the system immutable and system append-only 
flags may
           not be turned off; disks for mounted file systems, /dev/mem, and
           /dev/kmem may not be opened for writing; kernel modules (see
           kld(4)) may not be loaded or unloaded.


Michael