Messages in this thread | | | Subject | Re: [patch] Add basic sanity checks to the syscall execution patch | From | Benjamin Herrenschmidt <> | Date | Fri, 05 Sep 2008 20:57:11 +1000 |
| |
> and that'd be because at the same time they patch the syscall table (remember, > they already have to go to length to get around the read-only pages), they > can't also patch this 'protection'? sounds really plausible, right :). > > [fixed hpa's address, .org bounces.]
Sure, they can :-)
It's just an idea I had on irc but I tend to agree that it wouldn't have much effect in practice... regarding security, it will break some existing rootkits ... until updated ones show up.
Cheers, Ben.
| |