Subject: Re: new lkm stuff ?
To: Justin T. Gibbs <gibbs@freefall.freebsd.org>
From: Kevin P. Neal <kpneal@interpath.com>
List: current-users
Date: 08/26/1996 23:31:46
At 11:40 PM 8/25/96 -0700, Justin T. Gibbs wrote:
>>The idea of Linux loading/unloading kernel modules on the fly in a running
>>system bothers me, and strikes me as a hell of a security hole if an
>>intruder gains the ability to write to the root filesystem. Let's not go
>>that route, please.
>
>It would be interesting to know how NT can allow you to do this yet
>maintain C2 certification.  Hmmm.
>
>>XCOMM Kevin P. Neal, Sophomore, Comp. Sci. \   kpneal@interpath.com

There is a program in the Resource Kit for NT (from Microsoft) that points
out unsafe configuration options on an installed NT machine.

One of the things that it points out you have to do for C2 security is....
"take the machine off of all networks".

I was amused.
--
XCOMM Kevin P. Neal, Sophomore, Comp. Sci. \   kpneal@pobox.com
XCOMM  "Corrected!" -- Old Amiga tips file  \  kpneal@eos.ncsu.edu
XCOMM Visit the House of Retrocomputing:    /      Perm. Email:
XCOMM  http://www4.ncsu.edu/~kpneal/www/   /   kevinneal@bix.com