modules

Robert Connolly cendres at videotron.ca
Tue Jan 6 13:14:11 PST 2004


On January 6, 2004 04:05 pm, Amanda Lynn Rossmiller wrote:
> the other module thread brought this to mind,
> but it's another kind of module...
>
> i remember reading somewhere that kernel modules'
> use should be discouraged in a secure system...
> i can't remember the document i read it in,
> but chances are it is very outdated,
> and it wasn't very specific for reasons why.
>
> i was hoping someone would enlighten me?

I forget where i read it too. Disabling kernel loadable modules minimizess 
functionality of the kernel, and makes it slightly harder for an attacker to 
inject code.




More information about the hlfs-dev mailing list