[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: own kernel vs debian kernel (was: ptrace exploit)



* Dale Amon (amon@vnl.com) ha scritto:
> I roll my own; nomodules for servers or secure machines, modules for 
> non-secure workstations. Configure them to the specific minimum requirements
> of the particular use and not one option more.

 What you say here may lead to confusion. A monolithic kernel doesn't
give you added security toward a modular kernel. To make the kernel a
little bit more secure I'd use grsecurity (ie to prevent code injection,
syscall hijacking and so on).

 Just use modules if you like them.

> 
> Probably best recommendation is to build your own and make
> kpkg's.
> 

 IMHO that's a "Good Thing"(TM).

 Cheers,
 fc



Reply to: