full-disclosure - ipfilter port to linux

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: jeremiah at nur.net (Jeremiah Cornelius)
Subject: ipfilter port to linux

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 28 January 2004 17:59, Darren Reed wrote:
> Now if someone wanted
> a *real* 2.7 feature to add to linux, it'd be supporting building a
> kernel module without requiring /usr/src/linux to be present...but I
> can hear the screams already telling me why that's such a bad idea :)
>
> Darren

Can't you build with just the headers?  I guess that doesn't /really/ solve 
the problem that you're facing though...  Headers being VERY version 
dependent, and versioning themselves with the info from the kernel 
Makefile...

O.K. Darren!  You are on to something here.  If this is combined with loading 
of /signed/ lkms, I think we can get rid of many of the "bad idea" 
objections.

- --
jeremiah
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAGITbJi2cv3XsiSARAp/QAJ9XItQSe2u64Vqy3UFZCPec/kYrhgCfWWmh
ncWcZZzfk+jDd25pvKgD2HI=
=PFyN
-----END PGP SIGNATURE-----