Messages in this thread |  | | Date | Fri, 9 May 2003 01:08:08 -0700 | From | Greg KH <> | Subject | Re: The disappearing sys_call_table export. |
| |
On Fri, May 09, 2003 at 10:42:08AM +0300, Muli Ben-Yehuda wrote: > > For example, a rogue process is calling settimeofday() on your router > once a month(!). How are you going to find it? There's no LSM hook for > settimeofday()
Yes there is. Check the capable hook for CAP_SYS_TIME. LSM modules can get that info quite easily.
thanks,
greg k-h - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |