Re: [ilugd] Statically linked Vs Module
Yes , it is true that the user need to be root to insert any module in the kernel,apart from this there is a lot of way in which this can be done. Just visit this url : http://blacksun.box.sk/lkm.html -koushik Shuvam Misra wrote: Statically Linked kernel results performance improvement(fast booting) as well as A Secure System, because now a days maximum Hacking are done through Kernel Loadable Module. This last bit about security is interesting. If I need to insert or replace a kernel loadable module, I'll already have to be root on the server in question. If I'm already root, why do I need kernel loadable modules or anything else for that matter? Yours confusedly, Shuvam ___ ilugd mailing list [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd -- , , / \ ((__-^^-,-^^-__)) `-_---' `---_-' `--|o` 'o|--' \ ` / ): :( :o_o: - GNU/Linux - Choice of the Freedom Lovers Koushik Ghosh. Chinsurah, Hooghly, India. E - Mail ID [EMAIL PROTECTED] Home Page http://koushik.fateback.com/ ___ ilugd mailing list [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd
Re: [ilugd] Statically linked Vs Module
Rootkits typically install loadable modules to intercept process listings and filesystem calls and enable them (the rootkits) to hide their processes and files. All toward the objective of making the rootkit more difficult to detect. Got it. These will not help in gaining initial access, but in remaining undetected later, if the virus/worm has long-term plans. :) However, the original poster's comment, that using static drivers, etc. is more secure, is only true if you disable loadable modules entirely in your kernel. Otherwise the rootkit will be able to install its LKM in any case, regardless of how your kernel components are linked. Correct. And the real original poster had asked about performance. I guess on the performance front, there isn't much of an issue by going the module way? Shuvam ___ ilugd mailing list [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd
[ilugd] Statically linked Vs Module
Talking about compiling modules, could someone confirm any performance improvement if a kernel code is statically linked over compiling it as module ?? -js ___ ilugd mailing list [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd
