Re: Disabling module loading with a module?

fvw (fvw@chello.nl)
Tue, 17 Aug 1999 15:52:02 +0200

On Tue, 17 Aug 1999, Helge Hafting wrote:
> So you want to permanently disable module loading then, as
> any way *you* have to load modules could be abused by crackers?
No, because we're (or at least I'm) assuming reboot is impossible or attracts
attention. So only loading modules after bootup would be a problem.

> If so, compile everything into the kernel and leave modules out of the
> configuration. Nobody can load any modules then, no matter what amount
> of
> root privileges they hack. No loss to you, as you need to be unable to
> load any modules other than the initial ones. They may as well be
> compiled
> in.
If we lived in a perfect world: Yes... But then there's things like pnp :-(

> Did the crack module hide itself from "lsmod" too?
The article wasn't that indepth, but I assume it changed /proc/modules.

--


			Frank v Waveren
			fvw@chello.nl
			ICQ# 10074100


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/