On Wed, Nov 12, 2008 at 02:57:53PM -0500, Jared D. McNeill wrote:
> On Wed, 12 Nov 2008, David Holland wrote:
>> So, what do you do if you want a system entirely without POSIX
>> semaphores? It looks as if you have to patch the source to avoid
>> building the module.
>
> no options MODULAR ?
What if (as I suspect David meant) I just want to exclude *some*
modules?
Linux gives you yes/no/module control at kernel config time for each
feature. That's a start but I suspect what many want is "no feature
_X_ under any circumstances".
I think the simplest way to get that is to load a list of acceptable
modules and their hashes into the kernel at securelevel 0 during
boot and make it unchangeable when securelevel > 0. We very nearly
have the infrastructure to do this already.
--
Thor Lancelot Simon
tls%rek.tjls.com@localhost
"Even experienced UNIX users occasionally enter rm *.* at the UNIX
prompt only to realize too late that they have removed the wrong
segment of the directory structure." - Microsoft WSS whitepaper