| From | (David Wagner) | Subject | Re: One for the Security Guru's | Date | 24 Oct 2002 06:04:05 GMT |
| |
Robert L. Harris wrote: > The consultants aparantly told the company admins that kernel modules >were a massive security hole and extremely easy targets for root kits.
They were blowing smoke. Once the attacker has root on your machine, you're toast, whether or not you have loadable modules enabled. The right defense is to prevent attackers from getting root on your machine; the consultant's recommendations are probably not the best way to spend your time and energy. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|