Kernel configuration options

Mitch Bradley wmb at laptop.org
Tue Jan 1 16:43:31 EST 2008


 From a security standpoint, there is an advantage to building in 
everything.  The main kernel is verified with a crypto signature before 
it is executed.  Loading a module without first verifying a 
similarly-strong signature weakens the security.

Modules are a good idea for kernels that are intended to run on a wide 
variety of hardware.  I am in favor of treating XO like an appliance and 
making the kernel as monolithic as possible.




More information about the Devel mailing list