summaryrefslogtreecommitdiff
path: root/sys/modules
diff options
context:
space:
mode:
authormartin <martin@NetBSD.org>2019-10-28 16:37:55 +0000
committermartin <martin@NetBSD.org>2019-10-28 16:37:55 +0000
commit4bc52dfc02c14c04e7763a7fab5fb5682f8caeb8 (patch)
tree801603985d591e3efeec5d8a7a4df560f889f57c /sys/modules
parentf834a57d10fc72bdaef166b6a2e8d436f381562d (diff)
Pull up following revision(s) (requested by maya in ticket #385):
distrib/sets/lists/modules/mi: revision 1.127 sys/modules/Makefile: revision 1.230 sys/modules/filemon/Makefile: revision 1.4 (manually adjusted) sys/modules/Makefile: revision 1.229 Disable filemon. It isn't suited for general use (that is, it poses security risks), but the existence of the module means it is auto-loaded when /dev/filemon is opened, which can be done by any user. Thanks Ilja van Sprundel for the heads up. - Continue to build the filemon module, but don't install it. Hopefully this will help us detect any additional bit-rot that might occur. XXX It might be a good idea to modify the file permissions on /dev/filemon XXX to prevent auto-loading of the driver module by non-privileged users.
Diffstat (limited to 'sys/modules')
-rw-r--r--sys/modules/filemon/Makefile8
1 files changed, 7 insertions, 1 deletions
diff --git a/sys/modules/filemon/Makefile b/sys/modules/filemon/Makefile
index ef6ca482e92..846b3e2d4b6 100644
--- a/sys/modules/filemon/Makefile
+++ b/sys/modules/filemon/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.2 2015/08/20 11:05:01 christos Exp $
+# $NetBSD: Makefile,v 1.2.22.1 2019/10/28 16:37:55 martin Exp $
.include "../Makefile.inc"
@@ -9,4 +9,10 @@ IOCONF= filemon.ioconf
SRCS = filemon.c filemon_wrapper.c
NOMAN = no
+# Due to security concerns, we don't install the filemon module. We
+# do, however, want to keep building it to prevent bit-rot. Define
+# an empty install target for this.
+
+kmodinstall:
+
.include <bsd.kmodule.mk>