Subject: Re: LKMs
To: Manuel Bouyer <firstname.lastname@example.org>
From: Jaromír Dolecek <email@example.com>
Date: 11/25/2000 18:03:45
Manuel Bouyer wrote:
> However, I'd prefer to still be able to compile a monolitic kernel;
Sure. This is one of basic requirements. I for one never use LKMs
on production servers, mostly because I want to avoid possible
kernel/LKM version skew.
> LKM are problematic from a security POV.
Once the LKM linker would be in kernel, it would be possible to
make LKMs a bit safer, in that kernel would only allow to load LKMs
it was previously told are safe (on boot, probably).
Jaromir Dolecek <jdolecek@NetBSD.org> http://www.ics.muni.cz/~dolecek/
@@@@ Wanna a real operating system ? Go and get NetBSD, damn! @@@@