> Protecting the kernel against each module would cause a lot of unnecessary
> overhead. Is there any good reason why modules should not be "trusted"
> code?
If there is, we're all screwed, because they have to be. You've correctly
pointed out that once you're a module you can pretty much do anything you
want.
lilo