[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Security tip o' the month
- Subject: Re: [cobalt-security] Security tip o' the month
- From: shimi <shimi@xxxxxxxxxxxxxxxx>
- Date: Thu, 26 Apr 2001 11:41:04 -0700 (PDT)
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
On Thu, 26 Apr 2001, Carrie Bartkowiak wrote:
> > Grab 'lcap', a program which allows you to set kernel parameters on
> the
>
> Gossi,
> Installed this (as root) per your instructions, and every 10 minutes
> I'm getting an email saying:
> /sbin/rmmod -as
> rmmod: Operation not permitted
>
> Any advice? I know of at least one other person who is having this
> issue as well.
> I'm running a RaQ4i with all the latest updates (except the one that
> came out two days ago), tripwire, portsentry, logcheck, ipchains.
>
> CarrieB
If you're blocking in/out to kernel modules, rmmod (which removes nonused
modules from kernel) will surely not work... blah...
if u block modules from getting in/out, you have to disable the rmmod
cronjob.
- shimi.