Re: [gentoo-user] Re: Kernel modules and security

2019-03-22 Thread Peter Humphrey
On Friday, 22 March 2019 15:22:48 GMT Grant Edwards wrote: > On 2019-03-22, Peter Humphrey wrote: > > Years ago, in the days of Yggdrasil I think, > > Wow, that triggers a flashback! Glad to be of service :) Thanks all for the advice. -- Regards, Peter.

[gentoo-user] Re: Kernel modules and security

2019-03-22 Thread Grant Edwards
On 2019-03-22, Peter Humphrey wrote: > Years ago, in the days of Yggdrasil I think, Wow, that triggers a flashback! My first Linux install was Yggdrasil, and it took _hours_ to boot. The smartasses at Yggdrasil insisted on trying to play an audio clip that said something like "Welcome to Yggdra

Re: [gentoo-user] Kernel modules and security

2019-03-22 Thread Michael Orlitzky
On 3/22/19 10:46 AM, Peter Humphrey wrote: > Hello list, > > Years ago, in the days of Yggdrasil I think, the received wisdom was that > enabling kernel module loading was a bad idea because an attacker might be > able to load malicious software directly into the kernel. No modules --> one > mo

Re: [gentoo-user] Kernel modules and security

2019-03-22 Thread Andrew Savchenko
On Fri, 22 Mar 2019 14:46:20 + Peter Humphrey wrote: > Hello list, > > Years ago, in the days of Yggdrasil I think, the received wisdom was that > enabling kernel module loading was a bad idea because an attacker might be > able to load malicious software directly into the kernel. No modules

Re: [gentoo-user] Kernel modules and security

2019-03-22 Thread Rich Freeman
On Fri, Mar 22, 2019 at 10:46 AM Peter Humphrey wrote: > > Years ago, in the days of Yggdrasil I think, the received wisdom was that > enabling kernel module loading was a bad idea because an attacker might be > able to load malicious software directly into the kernel. No modules --> one > more at

[gentoo-user] Kernel modules and security

2019-03-22 Thread Peter Humphrey
Hello list, Years ago, in the days of Yggdrasil I think, the received wisdom was that enabling kernel module loading was a bad idea because an attacker might be able to load malicious software directly into the kernel. No modules --> one more attack route closed. What is the current thinking o