Zack Allen
Zack Allen
Seems like a good idea. Do we foresee any other logic in place where multiple of the `any/all/none` will be needed?
I personally think we should avoid running conditionals like that. If its an apache test, perhaps we can just have a separate apache yml file? I only say this as...
Can you add tests?
I imagine driver load has a much different context in Linux than Windows. I like being specific with LKM load, but there are plenty of other ways to load modules...
makes sense to me, theres a lot of research on userland rootkits outside of LD_PRELOAD too (technology specific modules for nginx, php, PAM, apache etc). Makes me wonder where eBPF...
Interesting post! I've seen this be solved a few ways, one of them being what you suggest. The preprocessing/replacement part can be tricky as it could break functionality if you...