[arch-general] [arch-dev-public] Trimming down our default kernel configuration

Arthur Țițeică arthur at psw.ro
Thu Apr 3 18:41:32 EDT 2014


În ziua de Mie 02 Apr 2014, la 18:50:14, Daniel Micay a scris:
> Until then, you can use any sane LSM module without recompiling the
> kernel by building just the module you plan on using and loading it.

I'm no kernel hacker by any means but AFAIK the LSM framework is still there 
with CONFIG_SECURITY, it's just the modules that are missing.

In the end the trimming guys gain nothing because the the security "bloat" 
(the LSM framework) is still in the kernel and the security guys lost the 
modules. Did I get anything wrong?

-- 
Arthur Țițeică
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <http://mailman.archlinux.org/pipermail/arch-general/attachments/20140404/c871b4cf/attachment.asc>


More information about the arch-general mailing list