> > There's a problem even with the lkm approach:
> > 
> > You only can load LKMs during single user mode.
> 
> Why is this?  I don't understand...

Because if you can load LKMs at a higher security level, those LKMs
can then disable the security level checking.  (LKMs loaded at
single-user mode, or from rc, can reasonably be considered 'trusted.')


cgd