Re: [TCLUG:14187] compile problems: net-pf-1 module?

[Chewie <chewie@wookimus.net>]

Regardless of how much the kernel increases in size because of it, you should
always add support for kernel modules.  The only exception to this is if
you're absolutely certain that your hardware will not change and you
wish to enforce strict kernel security.  For example, if you have an
internet accessible machine, I would argue that a monolithic kernel
would be more secure than one with loadable modules.  There are known
modules, as Ben tells me, that can be loaded into a Linux kernel to hide
thread processes, the existance of directories, and basically mask all
activity of a given user.  This is pretty scary.

However, if you are creating kernels for a workstation behind a
firewall, or perhaps you only have one computer (come on...go out, spend
$30 for a 486 w/16 MB of RAM and a floppy drive and install an LRP
firewall), modules are a wonderful thing.  They give you flexibility to
change your environment without having to recompile a kernel, which on
some systems takes more than a half hour.

Have fun! ;-)

-- 
^chewie

PGP signature