[lkml]   [1999]   [Dec]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: malware defense

I think that one good partial solution to security with modules anyway could

- extending the module (/binary?) format in 2.4/2.5 to include digital
- digitally signing modules via an encrypted digest
- done by known, trusted organisation (eg Linus)
- possibly enforced for 2.4/2.5 - ultimately this is required
- integrated into the kernel
- modifying modutils
- add digital signature checking
- maybe refuse to load module unless overridden with some flag in eg
- log all non-trusted loading of modules

This should work well, since the user will know whether the modules loading
are trusted or not.

I think this is a step in the right direction. Really, it shouldn't be hard
to implement, apart from encryption exporting
eg need to use 40-bit RSA encryption rather than 56-bit or 128-bit. IIRC
there may have been a change about US policy regarding encryption export
recently. 40-bit is a start anyway.

Maybe an interim bonus would be to add a module checksum or something to see
if it has been modified/hacked/infected, etc.

Any ideas?
Daniel J Blueman
Undergraduate - BSc Computing Science
UMIST university - Manchester
Direct line: 0161 933 3569
Mobile: 07775 583766

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:55    [W:0.029 / U:44.448 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site