lkml.org 
[lkml]   [1999]   [Aug]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRE: Disabling module loading with a module?
Date
On Tue, 17 Aug 1999, Jones D (ISaCS) wrote:
> > On Tue, 17 Aug 1999, Jones D (ISaCS) wrote:
> > > Sorry, I fail to see the connection between kernel modules and
> > > trusted networks.
> > Kernel modules can hide evidence of a crack, thus allowing crackers to
> > penetrate further into the network.
>
> Care to explain to me how ?
> Maybe I'm missing something here..

Modifying the kernel can make it very easy to hide what's going on. Without
kernel modifications ps could always be run from a write protected floppydisk,
and always show all processes. With a modified kernel, you could be made to see
only the bashes, logins, telnetds and ugly little vi's.

> > I must admit, the more I'm exposed to the cynisism of the
> > list, the more I
> > begin to wonder if it would all be worth it, except for maybe the odd
> > university etc. Congratulations :-)
>
> Don't let it get to you :-)
Nope, it wasn't the negative reaction as much as the arguments of it being more
bother than use. I try to let the arguments get to me, as it occassionaly keeps
me from hitting my head on brick walls.
--

Frank v Waveren
fvw@chello.nl
ICQ# 10074100

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:53    [W:3.045 / U:0.028 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site