From a security standpoint, there is an advantage to building in 
everything.  The main kernel is verified with a crypto signature before 
it is executed.  Loading a module without first verifying a 
similarly-strong signature weakens the security.

Modules are a good idea for kernels that are intended to run on a wide 
variety of hardware.  I am in favor of treating XO like an appliance and 
making the kernel as monolithic as possible.

_______________________________________________
Devel mailing list
[email protected]
http://lists.laptop.org/listinfo/devel

Reply via email to