Linux's Security Capabilities

3.1 What is a Kernel Module

• A module is a piece of code that adds functionality to the kernel
  • device drivers
  • network protocols
  • ...

• Modules can be dynamically loaded in memory without the need to recompile the kernel or reboot

• Modules are executed in the kernel space of the memory:
  • they have full access on the computer

  • they can create or intercept system calls

Linux's Security Capabilities

® © Hervé Schauer Consultants 2000 - 4 bis, rue de la gare - 92300 Levallois-Perret
Phone : +33 141 409 700 - Fax : +33 141 409 709 - Email : <secretariat@hsc.fr>