Re: [Qemu-devel] Design Decision for KVM based anti rootkit

2018-06-19 Thread Ahmed Soliman
On 19 June 2018 at 19:37, David Vrabel wrote: > It's not clear how this increases security. What threats is this > protecting again? It won't completely protect prevent rootkits, because still rootkits can edit dynamic kernel data structures, but it will limit what rootkits damage to only dynamic

Re: [Qemu-devel] Design Decision for KVM based anti rootkit

2018-06-18 Thread Ahmed Soliman
much used in kvm for a reason, so I wanted to verify that. On 18 June 2018 at 16:34, David Hildenbrand wrote: > On 16.06.2018 13:49, Ahmed Soliman wrote: >> Following up on these threads: >> - https://marc.info/?l=kvm&m=151929803301378&w=2 >> - http://www.openwall.com

[Qemu-devel] Design Decision for KVM based anti rootkit

2018-06-16 Thread Ahmed Soliman
Following up on these threads: - https://marc.info/?l=kvm&m=151929803301378&w=2 - http://www.openwall.com/lists/kernel-hardening/2018/02/22/18 I lost the original emails so I couldn't reply to them, and also sorry for being late, it was the end of semester exams. I was adviced on #qemu and #kerne