Kernel configuration options
Mitch Bradley
wmb at laptop.org
Tue Jan 1 16:43:31 EST 2008
From a security standpoint, there is an advantage to building in
everything. The main kernel is verified with a crypto signature before
it is executed. Loading a module without first verifying a
similarly-strong signature weakens the security.
Modules are a good idea for kernels that are intended to run on a wide
variety of hardware. I am in favor of treating XO like an appliance and
making the kernel as monolithic as possible.
More information about the Devel
mailing list