Subject: Re: LKM
To: =?iso-8859-1?q?P=E5l?= Halvorsen <paalh@unik.no>
From: Nathan J. Williams <nathanw@MIT.EDU>
List: tech-security
Date: 09/15/2001 11:56:55
P=E5l Halvorsen <paalh@unik.no> writes:

> So the conclusion is that if a user want to crach the system, he/she might
> do so by allowing the module do "illegal" operations on some kernel
> structures.

To load a module, one must have root priveleges and the securelevel
must be 0 or -1. At those securelevels there are plenty of other ways
for root to crash the system (scribbling on /dev/mem, for example).

        - Nathan