Re: [RFC][TRIVIAL] Print a KERN_INFO after a module gets loaded

From: Keith Owens (kaos@ocs.com.au)
Date: Sun Jun 16 2002 - 01:24:09 EST


On Sat, 15 Jun 2002 01:27:31 -0400 (CLT),
Robinson Maureira Castillo <rmaureira@alumno.inacap.cl> wrote:
>After some thinking (nothing serious) I came up with the idea of print a
>KERN_INFO after a module got loaded, why? Think about this, some guy
>inserts a LKM rootkit, obviously that module (think adore or knark)
>doesn't say anything when it gets loaded.

Pointless. The user already has root, any logging can be compromised.

>another example can be simply now the order of a group of
>pre-requisite modules when you load something using modprobe(8).

man insmod, see /var/log/ksymoops.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sun Jun 23 2002 - 22:00:10 EST