OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1995: Re: Anti Hijacking tools

Re: Anti Hijacking tools

Karl Strickland (karlbagpuss.demon.co.uk)
Sat, 28 Jan 1995 18:17:01 +0000 (GMT) 

> 
> > 
> > ------- =_aaaaaaaaaa0
> > Content-Type: text/x-pgp; charset="us-ascii"
> > Content-ID: <22906.791264012.1merde.dis.org>
> > Content-Description: Pgp signed cleartext
> > 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > 
> > 
> > Here is a program that does some of what der Mouse's device
> > driver does but runs as program that edits /dev/kmem to disable
> > the device /dev/vd.
> > 
> > I did what can to bullet proof the code so that it does not stomp on
> > the wrong device driver.
> > 
> > Written and tested under 4.1.3u1
> > 
> > 		-Pete
> > 		shipleydis.org
> 
> 
> AntiHijacking tool? It disables sun4's kernel ability to modload modules
> on fly, thus also disables things like ppp, slip, et al. I won't call it
> a solution.

Also note that there's nothing to stop someone opening /dev/kmem and putting
the correct cdevsw[] entries back in place.  If you dont need loadable modules,
they're safer out of your kernel.  If you do need them, better stop people
fucking about with /dev/kmem after you've disabled them via this method.

-- 
------------------------------------------+-----------------------------------
Mailed using ELM on FreeBSD               |                    Karl Strickland
PGP 2.3a Public Key Available.            | Internet: karlbagpuss.demon.co.uk
                                          |