[lkml]   [2002]   [Oct]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectOne for the Security Guru's

    Once there was a company durring the boom. This company had
    some outside consultants come in and tell them how to do a number of
    things. Many of the things were laughed off but some stuck. 2 things
    in particular are giving me nightmares now that I'm at this company.
    They have survived the bust and I think will actually stand a very good
    chance to be very important in the near future so I want to see them
    stay sane, stable and secure.

    The consultants aparantly told the company admins that kernel modules
    were a massive security hole and extremely easy targets for root kits.
    As a result every machine has a 100% monolithic kernel, some of them
    ranging to 1.9Meg in filesize. This of course provides some other
    sticky points such as how to do a kernel boot image.

    I'd like it from the guru's on exactly how bad a hole this really is
    and if there is a method in the kernel that will prevent such exploits.
    For example, if I disable CONFIG_MODVERSIONS is the kernel less likely
    to accept a module we didn't build? Are there plans to implement some
    form of finger printing on modules down the road?

    Thanks for your imput guys,

    Robert L. Harris

    These are MY OPINIONS ALONE. I speak for no-one else.
    perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:30    [W:0.019 / U:153.400 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site