> Is it possible to detecting kernel level rootkit without root permission?

Perhaps you could detect the most incompetent kernel rootkits that
way. It would probably be more work that it was worth, though.

(Consider that an honest kernel can, by design and as a feature, hide
information from userland — including root users. So a dishonest
kernel can do worse; in fact, your kernel might be honest and the
rootkit resides beneath that!)


-- 
http://noncombatant.org/

"These days, though, you have to be pretty technical before you can
even aspire to crudeness." — William Gibson

-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To post to this group, send email to android-security-discuss@googlegroups.com.
To unsubscribe from this group, send email to 
android-security-discuss+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/android-security-discuss?hl=en.

Reply via email to