Security Incidents mailing list archives
Re: yes, its t0rn again
From: Aaron <aaron () DARKLANDS ORG>
Date: Sat, 6 Jan 2001 01:17:59 -0800
On 01.01.04 at 14:29, Helmut Springer wrote: [...] # if you're playing rough you won't have modules support in the kernel # (as long as you can't make sure modules can't be tampered) and a # read only boot media checking the system from a read only core # system on startup. # # yes, that somewhat makes system maintenance a pain. the price to # pay. Not only could removing module support make system maintenance a pain, but it isn't sufficient to stop the kernel from being modified after startup. Silvio Cesare wrote a paper in Nov '98 that discusses how to do this via direct writes to /dev/*mem: Runtime Kernel kmem Patching http://www.big.net.au/~silvio/runtime-kernel-kmem-patching.txt Aaron
Current thread:
- yes, its t0rn again johnathan curst (Jan 01)
- Re: yes, its t0rn again Michael Damm (Jan 01)
- Re: yes, its t0rn again Joe Stewart (Jan 02)
- Message not available
- Re: yes, its t0rn again MadHat (Jan 02)
- Re: yes, its t0rn again Jonas Luster (Jan 02)
- Re: yes, its t0rn again MadHat (Jan 02)
- Re: yes, its t0rn again Michael Damm (Jan 01)
- Re: yes, its t0rn again Andrew Edelstein (Jan 03)
- Re: yes, its t0rn again Andreas Hasenack (Jan 03)
- Re: yes, its t0rn again Helmut Springer (Jan 04)
- Re: yes, its t0rn again Aaron (Jan 06)
- Re: yes, its t0rn again Helmut Springer (Jan 06)
- LKM insecurity Greg A. Woods (Jan 06)
- Re: yes, its t0rn again Andreas Hasenack (Jan 03)
- <Possible follow-ups>
- Re: yes, its t0rn again Robert Horn (Jan 04)
- Re: yes, its t0rn again Jeff Bachtel (Jan 04)
- Attack Signature Reprodution Alexandre Soares (Jan 06)
- Re: yes, its t0rn again Jeremy 'Circ' Charles (Jan 06)
- bootable readonly media in your pocket Re: yes, its t0rn again marc (Jan 05)
- Re: bootable readonly media in your pocket Re: yes, its t0rn again Michael H. Warfield (Jan 05)
- Re: bootable readonly media in your pocket Re: yes, its t0rn again Jeff (Jan 05)
- Re: bootable readonly media in your pocket Re: yes, its t0rn again marc (Jan 09)
- Re: yes, its t0rn again Jeff Bachtel (Jan 04)