Re: ethernet cards & promisc mode

[stuart () ECLIPSE NET UK (Stuart Henderson)]

On Thu, May 04, 2000 at 10:35:40AM -0500, C.J. Oster wrote:
> You could force the attacker to build an entire kernel and reboot the
> machine by building the card driver into the kernel rather than a module,
> but one can still work around that as well.

This depends if you can force boots to take place from a
read-only media such as CDROM. (Even without that protection,
securelevel should be good enough to prevent modififications
to the kernel by users without console access. Do OS other
than BSD have securelevel?).