lkml.org 
[lkml]   [2000]   [Nov]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: BTTV detection broken in 2.4.0-test11-pre5


    On Sun, 19 Nov 2000, David Lang wrote:

    > there is a rootkit kernel module out there that, if loaded onto your
    > system, can make it almost impossible to detect that your system has been
    > compramised. with module support disabled this isn't possible.

    Yes, it is. Easily. If you've got root you can modify the kernel image and
    reboot the bloody thing. And no, marking it immutable will not help. Open
    the raw device and modify relevant blocks.

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 12:47    [W:0.041 / U:58.612 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site