linux-kernel - Re: super root shell/mode/api

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <607293.42795.qm@web23608.mail.ird.yahoo.com>
Date:	Tue, 19 May 2009 14:36:54 +0000 (GMT)
From:	Andrea <andrea256it@...oo.it>
To:	7eggert@....de
Cc:	linux-kernel@...r.kernel.org
Subject: Re: super root shell/mode/api

> If there is a malware with root privileges, this would be of no use. You are
> 0wned.
> 
> If there is a malware with user privileges, stopping these processes will
> be enough.
> 
> So why bother?

That's exactly the problem a remote attacker or virus
can gain root and you are completely powerless. You want
to save data? The attacker just logs you out before you
can run any command. You can't even backup or save
data! You are owned. Yes.

With this super shell/mode/menu in less then one second, you stop
everything - a global SIGSTP - and gain control over your machine!

You can save all memory, e.g. for controlling what happened 
or data recovery, sigstop without hurry all processes that seems
a problem and so on.

Then when you have saved everything, made a backup of the hdd,
stopped the processes with viruses or too much memory you can
unfreeze the system - a global SIGCONT and it was like stopping
the time. Attackers, viruses, OOM processes are stopped in less
then one second. You can go back to the system whenever you
want. You the console user finally have power. 

The value of such a tool is only evident once you had it.

I can give you a lot of other reasons, but I must work now,
maybe in some days.

Regards.

Andrea Gedda

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/