I was reading the Solaris 10 story on slashdot.org, when I came across a
link someone had posted.  In essence, the article writer said that DTrace
makes writting rootkits easy for Solaris 10.  I wonder, is this something
that is utter garbage, or is this something Solaris 10 users need to worry
about?

Here is the link the slashdot poster posted that details why DTrace make
rootkits easy to write for Solaris 10.  I hope some Solaris Kernel engineers
can tell us if we need to worry or that this is all theoretical nonsense.
Thank you.

http://www.ccc.de/congress/2004/fahrplan/files/67-sun-bloody-daft-solaris-me
chanisms-paper.pdf

Mike Cox writes:
> Here is the link the slashdot poster posted that details why DTrace make
> rootkits easy to write for Solaris 10.
> 
> http://www.ccc.de/congress/2004/fahrplan/files/67-sun-bloody-daft-solaris-me
> chanisms-paper.pdf

Considering that many people have the foundation source code of
Solaris 8 and that code of OpenSolaris should also be available
soon (as well as many edu customers who have access to the full
source for many years) the situation is likely somewhat similar
to other OSes like Linux or *BSD where the source is available?


Markus