lkml.org 
[lkml]   [1999]   [Aug]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRE: Disabling module loading with a module?
Date
> > > Would it be possible to make a module for the linux kernel 
> > > that mimics this, by
> > > disabling the loading of modules? Could a module trap the
> > > necessary system
> > > calls for inserting a module, and disable them? That way It
> > > could act as a sort
> > > seal that is loaded after all modules are loaded at startup.
> >
> > What would be the point of this?
> > Normal users can't insert modules anyway. Knocking out support for
> > modules insertion after startup just imposes limitations.
> > If a hacker has got the privs to insert modules, he could recompile
> > a kernel without the module-lockout-after-startup routines anyhow.
>
> Yes, but this would require a reboot, something which on most
> systems is quite noticable, and can even be disabled by cmos pw's.

You missed my point.
The attack would have gained root. He could 'exec rm -rf /'
or fdisk, or 'cat /dev/random > /dev/sda', or _anything_ else.

Disabling modules interface won't stop bad people doing bad things.
It will just stop good people doing anything productive.
Time would be better spent improving security elsewhere.
Instead of thinking of ways to stop people doing things when they get in,
stop them getting in in the first place..

d.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:53    [W:0.972 / U:1.196 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site