Jared D. McNeill wrote:
> If we tell the kernel what LKM's are safe at boot, how do we compile and
> install a new LKM on the fly? Maybe it would be better to also give the
> option of using only 'known safe' modules at boot as well.

The idea is to allow any LKM on securelevel <= 0, and only those
previously "registered" to be loaded for higher securelevel. Of course,
it would only be possible to "register" safe LKMs when securelevel <= 0.

Jaromir
-- 
Jaromir Dolecek <jdolecek@NetBSD.org>      http://www.ics.muni.cz/~dolecek/
@@@@  Wanna a real operating system ? Go and get NetBSD, damn!  @@@@