disable module support in kernel
laxmicair at gmail.com
Sat Dec 28 23:02:57 EST 2013
I am following fedoraproject.org/wiki/Building_a_custom_kernel to rebuild
I have disabled all modules before compilation using make xconfig and I
have also checked .config file , there is not any =m option. I think I need
to modify kernel.spec file as I am compiling the kernel using kernel.spec
file(using rpmbuild command). And in kernel.spec file it is having options
to build modules ,create module directories etc. I am not getting in this
file where all to make changes.
Thanks in advance
On Fri, Dec 27, 2013 at 7:58 PM, Kevin Wilson <wkevils at gmail.com> wrote:
> What do you mean by changing kernel.spec? are you building it with
> rpmbuild ? can you describe how you are trying to build it ?
> On Fri, Dec 27, 2013 at 4:22 PM, Andy Johnson <johnsonzjo at gmail.com>
> > Laxmi,
> > How exactly do you try to disable it? do you set CONFIG_MODULES to N?
> > which error do you get in compile ? can you please post it here ?
> > regards,
> > Rami Rosen
> > http://ramirose.wix.com/ramirosen
> > On Fri, Dec 27, 2013 at 10:54 AM, Laxmi Meena <laxmicair at gmail.com>
> >> Hi All,
> >> As part of hardening of kernel, I want to disable module support. so
> that in
> >> the server dynamic loading of module is not supported. Otherwise it is
> >> possible to create malicious modules and load it.
> >> When i try to disable the module support.I am not able to compile the
> >> kernel.
> >> Do I need to make changes in kernel.spec file.
> >> Thanks in advance.
> >> _______________________________________________
> >> Kernelnewbies mailing list
> >> Kernelnewbies at kernelnewbies.org
> >> http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
> > _______________________________________________
> > Kernelnewbies mailing list
> > Kernelnewbies at kernelnewbies.org
> > http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Kernelnewbies