RE: Disabling module loading with a module?

Jones D (djones2@glam.ac.uk)
Tue, 17 Aug 1999 17:14:42 +0100


> > > > Sorry, I fail to see the connection between kernel modules and
> > > > trusted networks.
> > > Kernel modules can hide evidence of a crack, thus
> > > allowing crackers to penetrate further into the network.
> > Care to explain to me how ?
> > Maybe I'm missing something here..
> Search rootshell.com for heroin.c. You insert the module, and send
> signal 31 (IIIRC) to any process you wish no longer to have appear
> in any process list.

Right, I understand now what he meant.

> > d. [Not cynical, just confused]
> Clearly :)

<grin>

d. [enlightened]

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/