| |||||||||||||
Allowed modules listAllowed modules listPosted Mar 18, 2004 11:31 UTC (Thu) by nix (subscriber, #2304)In reply to: Allowed modules list by eru Parent article: A new Adore root kit
Anyway, this solution is not quite feasible for most ordinary users: configuring the kernel with its hundreds of options is tedious, and I have found it can be difficult to decide what drivers or features can be disabled safely. The result is also less flexible when new hardware is installed. So I do not think the statical kernel a very practical solution for most users.This may well be true for general-purpose systems (although I haven't found it so), but firewalls, at least, can run with module support removed (no matter what their hardware: if necessary, run the firewall as a UML instance with no module support. UML's not *quite* secure, and won't be until lcall syscalls can be virtualized, but it's damned close.)
(Log in to post comments)
|
|||||||||||||