Quoting Crispin Cowan <crispinat_private> on Wed, Jul 16 13:26: > > Intriguing. What does putting this functionality in the kernel provide > that user-space versions do not? Two things. First, it allows tampered files to be caught in real time. If someone hacked a system and copied in a modified binary (ls, ps, netstat, etc.), it would be caught the next time the file is executed. The kernel can print a big fat warning, deny access to the file, or even shut the system down. Second, it's a part of a bigger project that we're not ready to announce yet, sorry. Omen -- To iterate is human, to recurse, divine.
This archive was generated by hypermail 2b30 : Wed Jul 16 2003 - 14:00:58 PDT