[lkml]   [1999]   [Dec]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: malware defense
"A month of sundays ago BIONDI Philippe wrote:"
> I suggest you to have a glimpse at the LIDS project
> (Linux Intrusion Detection System).
> Its aim is to have an incorruptible kernel (no /dev/kmem, no modules after
> boot time) and then to protect user space entities (like daemons, files,

But this is the wrong way round. I need a kernel that I can verify is
the one I put there and not any simulacron. I.e. I need the kernel
to have compiled into it a secret that allows me to verify it when I
load a verification module.

> Actually, I just remember a mirror address :
> I released an unofficial version last night (which I hope will be soon
> official) which can be found at

I'll have a look. Does it address the question above?


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:55    [W:0.027 / U:0.912 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site