On Tue, 15 May 2007 09:21:17 +0200 Etaoin Shrdlu <[EMAIL PROTECTED]> wrote:
> On Tuesday 15 May 2007 03:57, Dan Farrell wrote: > > > On Tue, 15 May 2007 12:33:22 +1200 > > > > Mark Kirkwood <[EMAIL PROTECTED]> wrote: > > > 1/ builds the known needed things into the kernel > > > 2/ disables loadable modules completely > > > But Why? What's the benefit? > > Well, disabling loadable modules is generally considered to be good > for the purpose of hardening your system. For example, some rootkits > use LKMs, and removing loadable modules support might help to prevent > such attacks. Interesting, thanks. I'd never heard of LKM rootkits, although the concept is I suppose a good one, as far as defeating security goes. I must say I'm not going to start worrying about it, but point taken -- [EMAIL PROTECTED] mailing list
