no more monolithic kernels? [was Do I need the kernel-source?]

>One point to add: to keep the box as secure as possible, and since it
is
>a firewall, I would suggest removing kernel-headers and NOT using
kernel
>modules (i.e., compiling a static kernel.

I prefer static kernels for my exposed machines as well (there ARE
root kits as kernel modules around...). But I think I recall to have
read on lkml that there won't be such thing with >2.5. Can anyone with
more in depth knowledge confirm this? And if this is so: what to to
about it from a security point of view?

Thanks,
Ingo