On Fri, 19 Jan 2007, Arjan van de Ven wrote: > On Fri, 2007-01-19 at 17:12 +0000, Hugh Dickins wrote: > > Though so long as /dev/mem support remains, /dev/kmem might as well? > > they're not the same; for a long time, /dev/mem on actual memory > returned zeros... so you couldn't use it for rootkits ;) > (that got "fixed" a while ago)
We fixed (or "fixed") the mmap of them both, not to give zeroes on !PageReserved pages; but read and write were never so restricted. (Oh, I've said "never" again - expect I'll be humiliated shortly.) Can't rootkits work as just about as easily through read & write? Hugh - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
