what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

StMichael_LKM-0.04.tar.gz

Posted Jul 11, 2001

Authored by Tim Lawless | Site sourceforge.net

StMichael is a LKM that attempts to detect and divert attempts to install a kernel-module backdoor into a running linux system. This is done by monitoring the init_module and delete_module process for changes in the system call table. This is a experimental version, and a spin off from the Saint Jude Project.

Changes: Added the SHA1 checksum to complement the md5's, added timers to periodically revalidate the kernel, added a configuration script, and added some demos which will trigger StMichael.

tags | kernel

systems | linux

SHA-256 | a0d290b17442053787c6652f23397b32b04e3066b225c9bafc040f367dd857d5

Download | Favorite | View

Related Files

No related files