* Thank you for commit 831ff05d898cbf3484922d33573ee067782eb663 ("kernel: enable and enforce signed kernel modules")
@ 2020-02-09 14:17 Peter Müller
0 siblings, 0 replies; only message in thread
From: Peter Müller @ 2020-02-09 14:17 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 790 bytes --]
Hello Arne,
having a look at https://git.ipfire.org/ every now and then, I just
stumbled across commit 831ff05d898cbf3484922d33573ee067782eb663
("kernel: enable and enforce signed kernel modules", see:
https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=831ff05d898cbf3484922d33573ee067782eb663 ).
In my opinion, this makes post-exploitation activities like installing
kernel rootkits much harder, as most of them appear as kernel modules.
We talked about this quite a while ago, and I did not expect this
change to be made in IPFire 2.x anymore.
Anyway: Thank you very much for providing it. :-)
Since it already has been commited, adding an Reviewed-by tag does not
make sense anymore, but it's the willingness that counts!
Thanks, and best regards,
Peter Müller
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2020-02-09 14:17 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-02-09 14:17 Thank you for commit 831ff05d898cbf3484922d33573ee067782eb663 ("kernel: enable and enforce signed kernel modules") Peter Müller
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox