cybersecurity

3155 readers

1 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

founded 1 year ago

MODERATORS

submitted 6 months ago by ylai@lemmy.ml to c/cybersecurity@infosec.pub

7 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] jlh@lemmy.jlh.name 1 points 6 months ago

Yeah, it actually looks like Ubuntu leaves the module signing key accessible to root on the filesystem:

So root access basically gives you kernel access, if you just sign a malicious kernel module with the MOK.