revisit: turning some of the "always used" modules to built-in
Chris Ricker
kaboom at oobleck.net
Mon Jun 23 17:25:28 UTC 2008
On Sun, 22 Jun 2008, Arjan van de Ven wrote:
> Category 2: Always loaded in default install
> --------------------------------------------
> Rationale: yes you can turn off your firewall.. but nobody should do that.
> The others are default-loaded as well
> - ip_tables, iptable_filter
> - ip6_tables, ip6table_filter
> - dm_mod
> - ipv6
> - battery, ac, button, video, output
I still block loading of ipv6 and friends on lots of machines -- typical
reasons are "memory's limited and IPv6 will never be used" or "IPv6 will
never be used so remove the attack surface"
later,
chris
More information about the kernel
mailing list