richard offer wrote: >Whats technically to stop me writing a device driver that replaces the >exiting capable() code with my own implementation ? Likewise with >intercepting and replacing system calls ? > It's an obscurity defense: make it difficult, and therefore unprofitable to do so ;-) Crispin -- Crispin Cowan, Ph.D. Chief Scientist, WireX Communications, Inc. http://wirex.com Security Hardened Linux Distribution: http://immunix.org Available for purchase: http://wirex.com/Products/Immunix/purchase.html _______________________________________________ linux-security-module mailing list linux-security-moduleat_private http://mail.wirex.com/mailman/listinfo/linux-security-module
This archive was generated by hypermail 2b30 : Mon Sep 24 2001 - 17:42:34 PDT