| |||||||||||||
SecureBoot can't come soon enoughSecureBoot can't come soon enoughPosted Nov 22, 2012 19:32 UTC (Thu) by Seegras (subscriber, #20463)In reply to: SecureBoot can't come soon enough by dps Parent article: A rootkit dissected
> ... uses a kernel does not support modules, period. I don't need
> SecureBoot to stop you loading modules on that box :-)
Aye. I've got no module-loading capability on my firewalls and servers either. For years.
(Log in to post comments)
SecureBoot can't come soon enough Posted Nov 23, 2012 0:02 UTC (Fri) by mjg59 (subscriber, #23239) [Link]
There's plenty of ways for root to modify your running kernel without loading modules. Restrictions on module loading are necessary for improved security, but not sufficient.
|
|||||||||||||