Re: [Fwd: Re: LWN: Ptrace vulnerability in 2.2 and 2.4 kernels]
* Dariush Pietrzak (eyck@forumakad.pl) wrote:
> > One reason is security:
> > it's relatively easy for an intruder to install a kernel module based
> > rootkit, and then hide her processes, files or connections.
> isn't it security-by-obscurity?
> Determined hacker can still relatively easily insert code into kernel
> (vide phreack magazine articles )
True, but not in a so-automated way and definetively more advanced
skills would be needed. It's not security-by-obscurity at all, it's only
one layer of basic protection.
Reply to: