Re: [arch-general] [arch-dev-public] Trimming down our default kernel configuration

În ziua de Mie 02 Apr 2014, la 18:50:14, Daniel Micay a scris:

Until then, you can use any sane LSM module without recompiling the kernel by building just the module you plan on using and loading it.

I'm no kernel hacker by any means but AFAIK the LSM framework is still there with CONFIG_SECURITY, it's just the modules that are missing. In the end the trimming guys gain nothing because the the security "bloat" (the LSM framework) is still in the kernel and the security guys lost the modules. Did I get anything wrong? -- Arthur Țițeică