User: Password:
|
|
Subscribe / Log in / New account

Capabilities for loading network modules

Capabilities for loading network modules

Posted Mar 7, 2011 23:02 UTC (Mon) by jake (editor, #205)
In reply to: Capabilities for loading network modules by rwmj
Parent article: Capabilities for loading network modules

> Just that the attacker can use a bit of non-swappable memory by
> loading random modules?

No, the idea is that there may be kernel modules with vulnerabilities that aren't normally loaded, which might make an admin somewhat lax about updating them. If an attacker can load arbitrary modules (even just those in the approved /lib/modules location), it increases the attack surface of the running kernel.

jake


(Log in to post comments)

Capabilities for loading network modules

Posted Mar 8, 2011 7:38 UTC (Tue) by rwmj (subscriber, #5474) [Link]

Ah that makes sense, thanks.


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds