Re: Fw: Re[2]: FW: Linux server as it own firewall

From: Momchil Velikov (velco@fadata.bg)
Date: 09/17/01


To: Seth Arnold <sarnold@wirex.com>
Subject: Re: Fw: Re[2]: FW: Linux server as it own firewall
From: Momchil Velikov <velco@fadata.bg>
Date: 18 Sep 2001 00:50:45 +0300
Message-ID: <87sndlh4ga.fsf@fadata.bg>


>>>>> "Seth" == Seth Arnold <sarnold@wirex.com> writes:
[...]
Seth> If you really want to disable mounting, a small kernel module could be
Seth> written that could replace the mount(2) syscall with one that simply
Seth> printks("<1>Hmm, mount attempted: <args..>");. No more mounting, no
Seth> matter what programs are available in userspace.

... and also intercepting SYS_create_module, SYS_delete_module,
etc. to prevent being removed.

-velco