Re: seperate kernel modules

king killer wrote:
> 1 (or 2 days ago) i read a text how to infiltrate a linux system thru
> modules and here comes my idea.
> the kernel modules themselves shall be separated.
> for example a sound driver does not need to be able to access any
> other io-ports then the ones needed to use sound.

You might want to take a look at HURD, a new micro-kernel based unix kernel from the GNU project. Here only the most basic functions remain in the kernel, everything else, i. e. file systems or peripheral hardware, is handled by so-called servers which run in user space, not in kernel space. A very interesting approach. For a ready-to-install distribution see http://www.debian.org/hurd/ .

Best regards,
Martin Stricker

-- 
Homepage: http://www.martin-stricker.de/
Registered Linux user #210635: http://counter.li.org/

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.