Re: Future Linux devel. Kernels

From: Alan Cox (alan@lxorguk.ukuu.org.uk)
Date: Sun May 07 2000 - 13:11:21 EDT

Next message: Richard Gooch: "Re: Possible TCP Problem with RH6.2 talking to Solaris2.6/2.7"

Previous message: Linus Torvalds: "Re: [PATCH] address_space_operations unification"
In reply to: Andi Kleen: "Re: Future Linux devel. Kernels"
Next in thread: Ron Van Dam: "RE: Future Linux devel. Kernels"
Next in thread: Igmar Palsenberg: "Re: Future Linux devel. Kernels"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> > Enable Kernel Module signatures so any foriegn kernel modules will be
> > refused. (to avoid Kernel Module hacking).
>
> Not practical (unless you break the X server by disallowing /dev/kmem
> and ioports access)

The infrastructure for most of this is present, but it would mean running
with no CAP for raw I/O and that would give several people interesting
restrictions.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

Next message: Richard Gooch: "Re: Possible TCP Problem with RH6.2 talking to Solaris2.6/2.7"
Previous message: Linus Torvalds: "Re: [PATCH] address_space_operations unification"
In reply to: Andi Kleen: "Re: Future Linux devel. Kernels"
Next in thread: Ron Van Dam: "RE: Future Linux devel. Kernels"
Next in thread: Igmar Palsenberg: "Re: Future Linux devel. Kernels"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b29 : Sun May 07 2000 - 13:16:38 EDT