options NO_LKM?

Michael Ross michael.ross at gmx.net
Fri Sep 17 06:47:06 PDT 2004

Omer Faruk Sen wrote:

> I have seen that NO_LKM option has been removed (a long time ago ) 
> from supported options in kernel config file.
> I want to disable kernel module loading in my system. Is there a way 
> for that?

You can do that with securelevels:

  man securelevel

    1     Secure mode - the system immutable and system append-only 
flags may
           not be turned off; disks for mounted file systems, /dev/mem, and
           /dev/kmem may not be opened for writing; kernel modules (see
           kld(4)) may not be loaded or unloaded.


More information about the freebsd-questions mailing list