3 ms·
I teach an introduction to computer security course where I show my students how to write some basic rootkits for Linux. I need them to be able do that on the c
by p4bl0 4y ago
I teach an introduction to computer security course where I show my students how to write some basic rootkits for Linux. I need them to be able do that on the computer room machines (where they aren't root not sudoers), or on their own computer, but in both case I prefer if it doesn't cause a kernel panic if their code is wrong at some point.
As far as I know you cannot load kernel modules in a container. You need an actual VM for that.
- jlokier 4y agoVMs are perfect for that teaching scenario. That said, you're not supposed to be able to load kernel modules from a container. Which is exactly the sort of idea an enterprising rootkit author might think to take advantage of ;-) You might consider asking your students if they can figure out how they might go about getting a kernel module installed from in a container despite it not being allowed - and what advantages does that bring to the rootkit author. If necessary, you can test it using an LXD container in a VM.