Re: Another hook

Previous message: Titus D. Winters: "Re: Another hook"
In reply to: Titus D. Winters: "Another hook"
Next in thread: Titus D. Winters: "Re: Another hook"
Reply: Titus D. Winters: "Re: Another hook"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

chrisat_private

* Titus D. Winters (titusat_private) wrote:
> Can I get a feel for the idea of having a hook that will govern letting a
> module be detected?  I can imagine there are some securiyt modules (mine
> for example) that would rather not broadcast their existence via someone
> running lsmod.  I think I know where to add it already.

I'd feel better about letting vfs hooks handle /proc/modules and placing
a generic query hook in sys_query_modules.  this would simply allow you
to turn on/off lsmod altogether.  checking each module in a read of
/proc/modules or sys_query_modules seems too specific.

-chris

_______________________________________________
linux-security-module mailing list
linux-security-moduleat_private
http://mail.wirex.com/mailman/listinfo/linux-security-module