Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261635AbUCKSkd (ORCPT ); Thu, 11 Mar 2004 13:40:33 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261653AbUCKSkc (ORCPT ); Thu, 11 Mar 2004 13:40:32 -0500 Received: from bitchx.linuxbox.co.uk ([66.54.199.224]:28875 "EHLO linuxbox.co.uk") by vger.kernel.org with ESMTP id S261635AbUCKSk3 (ORCPT ); Thu, 11 Mar 2004 13:40:29 -0500 Date: Thu, 11 Mar 2004 11:26:23 -0800 (PST) From: pg smith To: linux-kernel@vger.kernel.org Subject: LKM rootkits in 2.6.x Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 644 Lines: 16 Any thoughts on the future of LKM rootkits in the 2.6 kernel branch ? In the last few years I've become quite interested in them (from a defensive point of view), but with the 2.6 kernel no longer exporting the syscall table, intercepting system calls would appear to be a non-starter now. In a perverse sort of way, i'm actually rather dissapointed: all that learning gone to waste. Cheers, Pete - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/