> So we have to implement some `immutable memory' mechanism. once the
> securelevel is set, it has to be (and the whole page) turned to readonly.
> What a waste of valuable memory ! (I hear people complain about kernel
> bloat once again :-)
Won't work because the loaded module has the required privileges to
access and modify the pagetables. What ever is inside the walls of
memory protection is trusted.
Ralf