lkml.org 
[lkml]   [1996]   [Jul]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Misc Fixes
Date
>Just insisting a module loader was started before the securelevel was raised
>would do the job I think.

I don't think so. There are ways the process could be manipulated --
writing to its inode, for one. Requiring the inode to be immutable
would help somewhat. ptrace also has possibilities, and one really
doesn't want to disable that normally. Anyway, where is kerneld going
to get the modules from? Is / immutable, and /lib, and
/lib/modules...?

I think the only solution is to entirely disallow module loading and
unloading at a sufficiently high securelevel. In such a secure
environment it will be necessary to load all required modules before
going secure -- not too burdensome, I'm sure you'll agree.

-zefram


\
 
 \ /
  Last update: 2005-03-22 13:38    [W:0.037 / U:2.540 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site