diff options
| author | martin <martin@NetBSD.org> | 2019-10-28 16:37:55 +0000 |
|---|---|---|
| committer | martin <martin@NetBSD.org> | 2019-10-28 16:37:55 +0000 |
| commit | 4bc52dfc02c14c04e7763a7fab5fb5682f8caeb8 (patch) | |
| tree | 801603985d591e3efeec5d8a7a4df560f889f57c /sys/modules | |
| parent | f834a57d10fc72bdaef166b6a2e8d436f381562d (diff) | |
Pull up following revision(s) (requested by maya in ticket #385):
distrib/sets/lists/modules/mi: revision 1.127
sys/modules/Makefile: revision 1.230
sys/modules/filemon/Makefile: revision 1.4 (manually adjusted)
sys/modules/Makefile: revision 1.229
Disable filemon.
It isn't suited for general use (that is, it poses security risks),
but the existence of the module means it is auto-loaded when /dev/filemon
is opened, which can be done by any user.
Thanks Ilja van Sprundel for the heads up.
-
Continue to build the filemon module, but don't install it. Hopefully
this will help us detect any additional bit-rot that might occur.
XXX It might be a good idea to modify the file permissions on /dev/filemon
XXX to prevent auto-loading of the driver module by non-privileged users.
Diffstat (limited to 'sys/modules')
| -rw-r--r-- | sys/modules/filemon/Makefile | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/sys/modules/filemon/Makefile b/sys/modules/filemon/Makefile index ef6ca482e92..846b3e2d4b6 100644 --- a/sys/modules/filemon/Makefile +++ b/sys/modules/filemon/Makefile @@ -1,4 +1,4 @@ -# $NetBSD: Makefile,v 1.2 2015/08/20 11:05:01 christos Exp $ +# $NetBSD: Makefile,v 1.2.22.1 2019/10/28 16:37:55 martin Exp $ .include "../Makefile.inc" @@ -9,4 +9,10 @@ IOCONF= filemon.ioconf SRCS = filemon.c filemon_wrapper.c NOMAN = no +# Due to security concerns, we don't install the filemon module. We +# do, however, want to keep building it to prevent bit-rot. Define +# an empty install target for this. + +kmodinstall: + .include <bsd.kmodule.mk> |
