Re: sebek as a patch?Oct 02 2005 11:46AM Thorsten Holz (thorsten holz mmweg rwth-aachen de)
Hi everyone,
catching up on mails and it seems like nobody has replied to this yet...
NAHieu wrote:
> Hi,
>
> One problem of sebek is it is rather hard to hide it in kernel module
> list (Imagine that the attacker has root access). I guess the
> problem can be improved if we patch sebek directly ...
catching up on mails and it seems like nobody has replied to this yet...
NAHieu wrote:
> Hi,
>
> One problem of sebek is it is rather hard to hide it in kernel module
> list (Imagine that the attacker has root access). I guess the
> problem can be improved if we patch sebek directly ...
[ more ]