Re: The disappearing sys_call_table export.

Greg KH (greg@kroah.com)
Fri, 9 May 2003 01:08:08 -0700


On Fri, May 09, 2003 at 10:42:08AM +0300, Muli Ben-Yehuda wrote:
>
> For example, a rogue process is calling settimeofday() on your router
> once a month(!). How are you going to find it? There's no LSM hook for
> settimeofday()

Yes there is. Check the capable hook for CAP_SYS_TIME. LSM modules can
get that info quite easily.

thanks,

greg k-h
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/