Messages in this thread | | | Date | Fri, 15 Apr 2005 18:15:37 +0000 | From | Allison <> | Subject | Re: Kernel Rootkits |
| |
hi,
I got the terminology mixed up. I guess what I really want to know is, what are the different types of exploits by which rootkits (specifically the ones that modify the kernel) can get installed on your system.(other than buffer overflow and somebody stealing the root password)
I know that SucKIT is a rootkit that gets loaded as a kernel module and adds new system calls. Some other rootkits change machine instructions in several kernel functions.
Once these are loaded into the kernel, is there no way the kernel functions can be protected ?
thanks, Allison - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |