• deegeese@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    0
    ·
    25 days ago

    No, you make a management API for security products that run in user space as root, you don’t use kernel modules.

    • lud@lemm.ee
      link
      fedilink
      English
      arrow-up
      0
      ·
      25 days ago

      Is that the way that EDR is implemented on Linux or are you guessing?