Patent ID: 7644271
Filing Date: 2010-01-05
Classification: G06F,H04L

Abstract:
1. A method of providing enforcement of security policies for kernel module loading comprising: caching file paths for shared library executable files opened by user processes; receiving a request to load a kernel loadable module (KLM); retrieving a previously cached file path for said KLM, said file path mapping a location of an executable file from which said KLM was produced; and applying a security policy to said file path, wherein when said file path triggers a security policy rule then taking an action associated with a triggered rule, and wherein when said file path does not trigger a security policy rule then said KLM request is allowed to proceed, wherein said caching file paths includes maintaining state information regarding executable files that are opened by a process, and said caching file paths further includes providing a mapping between a KLM object code image and a corresponding executable file.