Belling the Cat A Thought Experiment

• Immutable bit on various utilities.
• printk alarms on immutable files.
• Log to a secure system.
• Modified chattr and lsattr.
• Log attempts to clear immutable.
• Secure Level does not have to be perfect.
• Make sure multiple alarms go off before intruder has a chance to get to the kernel and modify the system.

Previous slide

Next slide

Back to the index

View Graphic Version

No notes for slide 29