carloslack / KoviD

Linux kernel rootkit
Other
283 stars 54 forks source link

Fix for #47 #50

Closed carloslack closed 1 year ago

carloslack commented 1 year ago

Revert procname changes to avoid messing with sysfs

turns out that module_param will, of course!, create: /sys/module//parameters/ forcing kovid to handle the new sysfs kobject and adding more sysfs handling for init and deinit, something that I want to avoid.

This way here we still avoid detection via old /proc/kovid, making the user to explicitly defining a /proc/ for the lkm. So it is up to the user to be creative and chose a difficult to guess name, hopefully, random, for his own good.