[Devil-linux-develop] Feature Request: Disabling of Module Loading

[Dean N. <di...@ti...>]

I was reading the release notes for Fedora (the latest version of RedHat's
consumer product - in beta).  It had the following comment
(http://fedora.redhat.com/docs/release-notes/):

------------------

The Fedora Core 0.94 kernel now makes it possible to prevent the loading of
kernel modules. This can be useful for system administrators wanting to
ensure that only a strictly-controlled set of modules are loaded. To disable
kernel module loading, issue the following command:

echo off > /proc/modules

Once this command has been issued, all further attempts to load kernel
modules will fail.

NOTE: Once kernel module loading has been disabled, a reboot is required to
re-enable it.

------------------------

And I was thinking - wouldn't this be a useful feature for Devil-Linux?
After all - we are [presumably] running a "static" environment.  So once a
system is booted, wouldn't we WANT to prevent the loading (and/or changing)
of kernel modules?

Just a thought....

Dean Nedelman
TimeLord Consulting