Re: Kernel Security Extensions USENIX BOF Summary

From: Crispin Cowan (crispinat_private)
Date: Tue Jul 03 2001 - 14:02:23 PDT

  • Next message: jmjonesat_private: "Re: Kernel Security Extensions USENIX BOF Summary"

    sarnoldat_private wrote:
    
    > Yeah, it probably isn't going to be as much fun as writing the modules
    > that we all want to write, but .. hopefully such a tool would make
    > debugging things easier for everyone.
    >
    > I *did* get it correct, right?
    
    Yes, Seth got it right.  The proposal was for a regression test program and
    regression test module.  The purpose is to test whether all the appropriate
    hooks are in all the appropriate places in the mainline kernel, so that any
    module has the opportunity to respond appropriately.
    
    The threat model under consideration is kernel developers who either
    optimize away a hook they don't understand, or add some new functionality
    (e.g. a new way to open files) without adding appropriate hooks.  Following
    some discussion, we concluded that there is no cure for this threat except
    dilligence.
    
    Crispin
    
    --
    Crispin Cowan, Ph.D.
    Chief Scientist, WireX Communications, Inc. http://wirex.com
    Security Hardened Linux Distribution:       http://immunix.org
    Available for purchase: http://wirex.com/Products/Immunix/purchase.html
    
    
    
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Tue Jul 03 2001 - 14:03:54 PDT