Hi! > > > With what we have in-kernel, and a restricted /dev/mem, achieving the > > > attack you mention is a lot less feasible, as the attacker has no access > > > to the memory being written out to the suspend partition, even as root. > > > Even if they did, people tend to notice boxes shutting down pretty quickly > > > making this a not-very-stealthy attack. > > > > Can I read somewhere about security model you are using? Would it be > > enough to restrict /dev/[k]mem to those people that have right to > > update kernel anyway? Or your approach is "noone, absolutely noone has > > right to modify running kernel"? [Do you still use loadable modules?] > > The problem is that, whatever the security model, if you have access to the > kernel memory (eg. via /dev/kmem), you can modify the security rules > themselves, so this should better be avoided. Well, under current linux security model, root has all permissions, including inserting modifying running kernel, touching hardware directly, and installing rootkits. Fedora may be trying to change that... but if so, I'd like to know what they are planning. Pavel -- Thanks, Sharp!
