Re: Kernel-Question

[Giacomo Mulas <gmulas@ca.astro.it>]

On Fri, 28 Nov 2003, Matthias Wieser wrote:

> Does it make sense to use module-disabled kernels to prevent root kits to be
> used with a kernel?

There are other ways to insert code into a running kernel. However, it may
break some automated worms or stop script kiddies who don't quite know
what they are doing and what to do if their module insertion fails. If you
are serious about it, and want to spend the time needed to configure
things properly, use grsecurity or SELinux or similar approaches.

just my 2¢...
Giacomo


-- 
_________________________________________________________________

Giacomo Mulas <gmulas@ca.astro.it>
_________________________________________________________________

OSSERVATORIO ASTRONOMICO DI CAGLIARI
Str. 54, Loc. Poggio dei Pini * 09012 Capoterra (CA)

Tel. (OAC): +39 070 71180 248     Fax : +39 070 71180 222
Tel. (UNICA): +39 070 675 4916
_________________________________________________________________

"When the storms are raging around you, stay right where you are"
                         (Freddy Mercury)
_________________________________________________________________