On Thu, 12 Apr 2001, Kurt Seifried wrote: > You know something that would be nice is a kernel switch that disabled touching > modules completely, i.e. you boot, load some modules (like subdomain module/etc) > then flip a switch and you can't add or remove modules (sort of like a > securelevel). Yeah, that'd definately be nice. That already exist : this is called the capabilities bounding set : http://pw1.netcom.com/~spoon/lcap/ -- Philippe Biondi Systems administrator Webmotion Inc. http://www.webmotion.com mailto:philippe.biondiat_private Fax. (613) 260-9545
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:15:25 PDT