> without INSECURE, securelevel is already 0 at boot. Yes. And you can read /dev/mem at securelevel 0, no? > I think that options INSECURE should be added to conf/GENERIC64 No.