Re:Linux Malware “Drovorub” developed by Russian exposed by ...
by renewiltord on Thursday August 13, 2020 @03:18PM
(#24147172)
Can someone explain this? I have DKMS enabled because I use the proprietary nvidia drivers. Also all my drivers are kernel modules. I feel like I'm missing something here, though.
Re:Linux Malware “Drovorub” developed by Russian exposed by ...
by posix_me_less on Saturday August 15, 2020 @04:33PM
(#24172144)
If you use proprietary binary code in kernel, it runs with high privileges and can be used to provide remote root access to your system. Don't worry much about it, your computer most probably already runs proprietary binary code with such high privileges before your OS boots.
Re:Linux Malware “Drovorub” developed by Russian exposed by ...
by noodlesUK on Thursday August 13, 2020 @05:08PM
(#24149196)
While I’ve certainly enjoyed running all compiled-in kernels in the past, I think it’s a bit inflammatory to suggest that there’s no need for modules, when literally every major Linux distro I have ever seen in production (outside of certain embedded devices) has a modular kernel. There’s a good reason for that...
Re:Linux Malware “Drovorub” developed by Russian exposed by ...
by Pick-A-Hill2019 on Thursday August 13, 2020 @02:29PM
(#24146544)
The Cybersecurity Advisory link in the first line of the article is worth a read for a greater insight as to why it might be more than just 'pfft, nothing to see here' regarding kernel modules
If you're running a module-enabled kernel then you were already pwned to begin with; nothing to see here. There is absolutely no need for modules except on live cds and the like. Of course, kernel configuration is another huge headache; don't get me wrong.