kernel modules are a convenience [LWN.net]

kernel modules are a convenience

Posted Dec 18, 2011 15:53 UTC (Sun) by ranmachan (subscriber, #21283)
In reply to: kernel modules are a convenience by tialaramex
Parent article: First version of kmod released

<matrix style>
How do you inject a kernel module...
...if you don't have access to kernel memory?
</matrix style>

CONFIG_STRICT_DEVMEM=y

Though you still can just replace the kernel image and reboot into that.
However if you run on e.g. Xen you can prevent that as well, leaving only comparatively more easy to detect user-mode root kits (ignoring possible supervisor bugs or an insecure dom0).

(Log in to post comments)

kernel modules are a convenience

Posted Dec 18, 2011 18:45 UTC (Sun) by PaXTeam (subscriber, #24616) [Link]

> CONFIG_STRICT_DEVMEM=y

you'd think it does what you think it does but it doesn't... which pill did you take? ;)