Known-exploit detection for the kernel
Known-exploit detection for the kernel
Posted Dec 19, 2013 12:35 UTC (Thu) by spender (guest, #23067)In reply to: Known-exploit detection for the kernel by ncm
Parent article: Known-exploit detection for the kernel
I gave you the exact file and function to look at, and it's clear you haven't even done that, so this will be my last post in this thread. You don't want to learn, you want validation that you could somehow wrap this turd of a feature with the appropriate metal lining to make it useful. It's just not going to happen.
What you propose (which is also what Ingo proposed) will not prevent invisible detection of the vulnerable kernel. I have *many* other methods I can use even in the event everything you mention is implemented.
This is my promise: if any form of this security theater makes its way upstream and into any distro, I will write any code necessary to expose it for what it is.
-Brad