From: Felix Zielcke <fzielcke@z-51.de>
To: The development of GRUB 2 <grub-devel@gnu.org>
Subject: RE: grub and root=label=
Date: Tue, 09 Sep 2008 17:14:20 +0200 [thread overview]
Message-ID: <1220973260.4222.25.camel@fz.local> (raw)
In-Reply-To: <1220972995.13372.8.camel@localhost>
Am Dienstag, den 09.09.2008, 17:09 +0200 schrieb Javier Martín:
> In order to load modules you have to be root, so don't you think that if
> someone gets to the point he would be able to load modules in your
> server the battle is already lost?
It's a easy way to get a bit more security.
A kernel module can do a bit more then a normal root user process and
more important it can hide things better.
These rootkits could just do something like `rm -rf /' but they mainly
do hiding processes so that this machine can get used for their stuff
too.
Ok they can reboot the machine and load there own kernel, but that's too
obvious.
next prev parent reply other threads:[~2008-09-09 15:14 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-09-09 1:26 grub and root=label= Greg White
2008-09-09 4:31 ` Chris Knadle
2008-09-09 14:55 ` Greg White
2008-09-09 15:01 ` Felix Zielcke
2008-09-09 15:09 ` Javier Martín
2008-09-09 15:14 ` Felix Zielcke [this message]
2008-09-09 16:00 ` Robert Millan
2008-09-10 0:11 ` Chris Knadle
-- strict thread matches above, loose matches on Subject: below --
2008-09-08 16:02 Greg White
2008-09-08 18:18 ` Chris Knadle
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1220973260.4222.25.camel@fz.local \
--to=fzielcke@z-51.de \
--cc=grub-devel@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.