Re: [RFC][TRIVIAL] Print a KERN_INFO after a module gets loaded

Keith Owens (kaos@ocs.com.au)
Sun, 16 Jun 2002 16:24:09 +1000


On Sat, 15 Jun 2002 01:27:31 -0400 (CLT),
Robinson Maureira Castillo <rmaureira@alumno.inacap.cl> wrote:
>After some thinking (nothing serious) I came up with the idea of print a
>KERN_INFO after a module got loaded, why? Think about this, some guy
>inserts a LKM rootkit, obviously that module (think adore or knark)
>doesn't say anything when it gets loaded.

Pointless. The user already has root, any logging can be compromised.

>another example can be simply now the order of a group of
>pre-requisite modules when you load something using modprobe(8).

man insmod, see /var/log/ksymoops.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/