[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Server hacked - next...?



On Mon, Jul 07, 2003 at 12:05:12PM -0700, Keegan Quinn wrote:
> On Fri, Jul 04, 2003 at 01:09:53PM +0100, Shri Shrikumar wrote:
> > I dont have module support and I dont have /proc/kmem. Am I missing
> > something ? Running 2.4.20.
> 
> /dev/kmem?  You can remove it, sure, but it can just be mknod'd again.

Of course, after I wrote this, I noticed the correction was made later in
the thread.  Sorry.

If you really think getting rid of this device node is critical, you might
be able to edit some parts of the kernel source to prevent it from working
at all.  This might break any number of things in confusing ways.  You
could also look at patches like SE Linux and GRsecurity, which deal in
different ways with restricting different kinds of access.

 - Keegan

Attachment: pgpvyZI36Qy4q.pgp
Description: PGP signature


Reply to: