Hello!
Erik Hensema wrote:
>
> If you can't reboot to apply a security fix, you've got a serious problem.
>
> A better fix in a running system is to simply disable dynamic module
> loading: echo /no/such/file > /proc/sys/kernel/modprobe
> At the very least you can be sure your machine won't crash this way ;-)
>
IIRC, dynamic module loading is not required to exploit all the bugs
present in ptrace. Luckly all the exploits floating around require kmod :)
Regards,
Nuno Silva
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Mon Apr 07 2003 - 22:00:22 EST