Re: Do I need the kernel-source?

Note that in any case, if you don't intend to have services like ftp,
telnet, samba, nfs, php/cgis on the web server, there are no miracles: if
you are not providing any service, they cannot do anything to the machine.

The modules issue becomes a potential issue only if you allow other people
(from outside) to tap into one of these services - and even then, it's
hard and most port-scanners and hack-bots will be unsuccessful - lets not
buy all the media sensionalist trash...

Ah.. and if you are going to install a ISDN card, there are very high
chances that you'll have to recompile some modules and kernel. (and it may
be harder than it should :( )

Silvio

to the machine  On Tue, 14 May 2002, Rodolfo J. Paiz wrote:

> At 5/14/2002 10:42 AM -0500, Ben Ricker wrote:
> >One point to add: to keep the box as secure as possible, and since it is
> >a firewall, I would suggest removing kernel-headers and NOT using kernel
> >modules (i.e., compiling a static kernel.
>
> Hey, I'm all for paranoia. After all, on the Internet, they *are* out to
> get you and there is no such thing as too paranoid.
>
> I shudder to do my first kernel compile on a "mission-critical" box; still,
> I suppose I can always reboot into a known-good kernel, and silo
> autodetects kernels saving me that one other possible source of grief.
>
> Is there anything I *should* definitely include in my kernel? Also, I guess
> that for maximum probability of successful operation, I should compile the
> same version of the kernel (i.e. the one for which I already have sources
> and headers and docs)?
>
> Sorry to start at such a basic stage...
>
>
>

-- 
````````` Silvio Emanuel Nunes Barbosa de Macedo (PhD Student) '''''''''''
[email protected]                                         [email protected]
Intelligent and Interactive Systems,EEE-Pg         Telecom. and Multimedia
Imperial College, University of London                         INESC Porto
Exhibition Road,                                       Pc da Republica, 93
London SW7 2BT, England                            4050-497 Porto Portugal
Tel:+44 20 75946323                                    Tel:+351  222094220