revisit: turning some of the "always used" modules to built-in

Chris Ricker kaboom at oobleck.net
Mon Jun 23 17:25:28 UTC 2008


On Sun, 22 Jun 2008, Arjan van de Ven wrote:

> Category 2: Always loaded in default install
> --------------------------------------------
> Rationale: yes you can turn off your firewall.. but nobody should do that.
>            The others are default-loaded as well
> - ip_tables, iptable_filter
> - ip6_tables, ip6table_filter
> - dm_mod
> - ipv6
> - battery, ac, button, video, output

I still block loading of ipv6 and friends on lots of machines -- typical 
reasons are "memory's limited and IPv6 will never be used" or "IPv6 will 
never be used so remove the attack surface"

later,
chris




More information about the kernel mailing list