3

Is it possible to compile Linux Security Modules as optional modules (.ko) and load them at runtime (or boottime)?

The modules in the Linux source tree seem to need to be compiled into the kernel (and can be selected via kernel boot params).

Just wondering if a loadable LSM is possible in a supported fashion?

RandomHash
  • 669
  • 6
  • 20
depletionmode
  • 149
  • 1
  • 7
  • If they have a `tristate` in their respective *Kconfig* options. – 0andriy Apr 29 '19 at 20:35
  • 1
    From playing around it seems that security_add_hooks() is in a NX-protected page at runtime so calling it from a loadable module doesn't seem possible (even after kallsyms is used to resolve it) - at least on my Arch kernel :( Alas – depletionmode Apr 30 '19 at 14:10

0 Answers0