From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.62) (envelope-from ) id 1HnqvF-0002sr-IT for garchives@archives.gentoo.org; Tue, 15 May 2007 06:54:14 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.0/8.14.0) with SMTP id l4F6qr1o019413; Tue, 15 May 2007 06:52:53 GMT Received: from dcnode-02.unlimitedmail.net (static-adsl-b-16-58.ipcom.comunitel.net [212.145.239.58] (may be forged)) by robin.gentoo.org (8.14.0/8.14.0) with ESMTP id l4F6mWFs014592 for ; Tue, 15 May 2007 06:48:33 GMT Received: from ppp.zz ([137.204.208.98]) (authenticated bits=0) by dcnode-02.unlimitedmail.net (8.14.0/8.14.0) with ESMTP id l4F6mV5l008616 for ; Tue, 15 May 2007 08:48:32 +0200 From: Etaoin Shrdlu To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Managing my kernel Date: Tue, 15 May 2007 09:21:17 +0200 User-Agent: KMail/1.9.5 References: <49bf44f10705140848n41d13c0cy5225964032ecb480@mail.gmail.com> <4648FFD2.3050609@paradise.net.nz> <20070514205742.3a7f5776@voyager.g.spore.ath.cx> In-Reply-To: <20070514205742.3a7f5776@voyager.g.spore.ath.cx> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200705150921.17733.shrdlu@unlimitedmail.org> X-UnlimitedMail-MailScanner-From: shrdlu@unlimitedmail.org X-Spam-Status: No X-Archives-Salt: e4da1719-3355-457e-b1ac-1882077809a9 X-Archives-Hash: a2dc27193b8a58d4ad1d0127313dbe1a On Tuesday 15 May 2007 03:57, Dan Farrell wrote: > On Tue, 15 May 2007 12:33:22 +1200 > > Mark Kirkwood wrote: > > 1/ builds the known needed things into the kernel > > 2/ disables loadable modules completely > But Why? What's the benefit? Well, disabling loadable modules is generally considered to be good for the purpose of hardening your system. For example, some rootkits use LKMs, and removing loadable modules support might help to prevent such attacks. -- gentoo-user@gentoo.org mailing list