Date: 28 Jul 2004 14:10:39 -0700 From: Andrew Konstantinov <abkonstantinov@earthlink.net> To: hackers@freebsd.org Subject: Re: Kernel options Message-ID: <1091049038.4409.25.camel@sp5.cs.ucdavis.edu> In-Reply-To: <20040728181459.24126.qmail@web21528.mail.yahoo.com> References: <20040728181459.24126.qmail@web21528.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 2004-07-28 at 11:14, bsd hack wrote: > Hi, > I am working with the Kernel config file to optimize it and also to improve the overall security of the system! > > I have the following quetions: > (1) There are a few options that are not available in the default kernel... like the IPFIREWALL options(and the like)... I basically need to know all possible options I can add to the kernel config file! I think this is related to the thread about "next generation" kernel config stuff, but for starters you might want to take a look at the NOTES file. > (2) I guess these options can be used to set the kernel variables accessible through the sysctl command. So can I create my own options so that I can set a few kernel variables as and when I build the custom kernel? Perhaps what you are looking for is the tuning manual page? > (3) and also my aim includes optimizing the kernel... so by enabling only the options I need to I should get a get optimization... is there anything else that can be done? By excluding all the unnecessary code from the kernel you are performing kernel minimization. What you are really looking for is the run time system optimizaion (configuration process) for a particular task that it is going to perform. > (4) My aim is to improve local and network security. I guess enabling IPFIREWALL helps with the network security part.... are there any special options for local security? Enabling IPFIREWALL option won't help your security, but configuring your firewall properly will. Also, there is some useful theoretical information in the security manual page. Andrew
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1091049038.4409.25.camel>