lkml.org 
[lkml]   [1999]   [Aug]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRE: Disabling module loading with a module?
Date
On Tue, 17 Aug 1999, Jones D (ISaCS) wrote:
> You missed my point.
> The attack would have gained root. He could 'exec rm -rf /'
> or fdisk, or 'cat /dev/random > /dev/sda', or _anything_ else.
True, at the moment the attack succeeds the machine is lost. But the danger is
with machines on trust-networks. This would hinder covering up so an attack on
the next host could be mounted.

BTW: cat /dev/random > /dev/sda would be *bloody* slow.

> Disabling modules interface won't stop bad people doing bad things.
> It will just stop good people doing anything productive.
That is why the user always has the choice whether or not to use security
feature X. I'm not suggesting putting it in the main kernel defaulting it to on,
I'm just poking around, looking for opinions and enlightenment.

> Time would be better spent improving security elsewhere.
> Instead of thinking of ways to stop people doing things when they get in,
> stop them getting in in the first place..
I like to try at least both. But I agree, securing getting in bit is certainly
higher priority.

--

Frank v Waveren
fvw@chello.nl
ICQ# 10074100

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:53    [W:0.025 / U:0.148 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site