Re: BTTV detection broken in 2.4.0-test11-pre5

From: David Ford (david@linux.com)
Date: Sun Nov 19 2000 - 11:02:28 EST


> Why not? /me has nearly everything compiled as modules.

Some people have extensive sh, awk and sed scripts to manage their systems, some
have compiled programs.

> > There is an introduced security weakness by using kernels.
>
> ??? Guess you mean "by using modules"? Which weakness? Other than
> bugs? I don't see bugs like the recent modprobe oops as major problem.
> They happen (everythere), they get fixed.

If your server has a kernel that doesn't support modules, then a trojan hiding
module can't be used. Modules are easily tampered with and you no more the wise.

> > So..what is the point in making it modular?
>
> It's much more flexible.
>
> You can reconfigure/update the driver without recompiling the kernel
> and without rebooting. If the driver needs some tweaks to make it
> work with your hardware you can update /etc/modules.conf and reload
> the modules with the new options. If you have found a working
> configuration, you can simply leave it as is.

Modules are fantastic for workstations, testbeds, machines that change a lot.
Servers are normally a static configuration. I won't ship a blackbox device to a
customer that allows them to twiddle with things, their curiosity becomes a
maintenance hassle. I have a product in the lab that uses bttv and I'd really
love to be able to compile it into the kernel.

> * rmmod ide-cd; modprobe ide-scsi; modprobe sr_mod (for burning CD's)
> * /etc/rc.d/init.d/network stop; rmmod de4x5; modprobe tulip;
> /etc/rc.d/init.d/network start (tulip manages it to drive the card
> full-duplex, de4x5 doesn't).

Tulip works dandy for me, I have no need of changing it and on a remote server
it's not intelligent to remove your networking support and reload it. The
process may fail and that leaves you dead.

> Please turn this off.

My vcard size is the same or smaller than the average signature. Using mime, you
have the option of easily filtering vcards. Signatures aren't as easily
identified for filtering.

-d



-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Thu Nov 23 2000 - 21:00:17 EST