lkm-hidden icon indicating copy to clipboard operation
lkm-hidden copied to clipboard

/proc/sys/kernel/tainted

Open hrt opened this issue 1 year ago • 0 comments

If you load this module, /proc/sys/kernel/tainted will have bits masks set and you will get a pretty message in dmesg:

[   62.037165] example: loading out-of-tree module taints kernel.
[   62.037234] example: module verification failed: signature and/or required key missing - tainting kernel

Whilst it's not a complete giveaway.

  1. The module (example) is visible above.
  2. Since the tainted module is hidden, the tainted flag indicates that a module is potentially hiding.

hrt avatar Nov 07 '23 21:11 hrt