News for hackers. Stuff that matters.

A comment on Facebook first level interview for Linux admin position. Parent comment

Re:Facebook first level interview for Linux admin position by forgeman on Saturday September 28, 2013 @10:04PM (#6463810)
You can check the consistency of the kernel "file" and compare a MD5 / SHA-1 of known good kernel. Assumption here that the kernel is loaded into healthy hardware. Depends on the spirit of the question. I do agree, running kernel looking at itself... chicken::egg.
[ Parent | on HN ]
Re:Facebook first level interview for Linux admin position by gcr on Wednesday October 02, 2013 @12:06AM (#6480554)
For corruption, sure, but rootkits can mess that up by changing the md5 binary to always give the tainted kernel a known checksum.

If a malicious attacker can modify a kernel, no process running within the kernel can check it for consistency.

[ Parent | on HN ]