Re: LKM rootkits in 2.6.x

From: Tomasz Torcz
Date: Thu Mar 11 2004 - 14:52:02 EST


On Thu, Mar 11, 2004 at 08:31:49PM +0100, M?ns Rullg?rd wrote:
> Christophe Saout <christophe@xxxxxxxx> writes:
> > Ugh... this sounds ugly. This should be forbidden. I mean, what are
> > things like EXPORT_SYMBOL_GPL for if drivers are allowed to patch
> > whatever they want?
>
> Who is to stop them? When running in kernel mode you are god.

Uhm, Next Generation Secure Computing Base? Running in ring -1. ;)

Sorry, I couldn't resist ;)
--
Tomasz Torcz Only gods can safely risk perfection,
zdzichu@xxxxxxxxxxxxxxxxx it's a dangerous thing for a man. -- Alia

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/