Messages in this thread | | | Date | Mon, 04 Aug 2003 15:30:39 +0300 | From | eliezer <> | Subject | Re: [PATCH] Allow /dev/{,k}mem to be disabled to prevent kernel from being modified easily |
| |
Erik Andersen wrote:
>bert hubert wrote: > > >>Greetings, >> >> >>It blocks attempts by rootkits, such as devik's SucKIT, to hide themselves. >> >> > >Until the rootkit, already running as root, loads stuff as a >kernel module... Perhaps you should make this enforce that >people have CONFIG_MODULES=n, > > > (on a diff thread you talked about doing this dynamically) Maybe you should also disable module loading. has anyone already done such a thing as disabling module loading after a point in system startup?
Eliezer
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |