Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Reviving the modprobe_path Technique: Overcoming search_binary_handler() Patch (theori.io)
8 points by todsacerdoti 10 months ago | hide | past | favorite | 3 comments


Does anyone know why modprobe_path isn't in read only memory? Would just making it const char be enough to avoid this technique?


Oh, it's because it can be set by /proc/sys/kernel/modprobe


There is CONFIG_STATIC_USERMODEHELPER that disables the sysctl you mentioned and actually make modprobe_path read-only.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: