Re: Out of tree module using LSM

From: Alan Cox
Date: Thu Nov 29 2007 - 16:51:14 EST


> Jargon File in all its glory. And if you still think you could look for
> patterns, how about executable code that self-modifies in random ways
> but when executed as a whole actually has the functionality of fetchmail
> embedded within it? How would you guard against that?

Thats a problem for whoever writes the ESR detection tool and to what
level it works. The question for the kernel is how do we provide a
mechanism to allow (to some extent at least) this kind of tool to run.

Alan
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/