[frumiousirc]

If I'm a malicious actor that gets root, can I killswitch the killswitch?

[htmlenjoyye]

you're on the other side of the secure door already

killswitch is to prevent you from gaining root

[cowthulhu]

Once you’ve got root, you don’t need to exploit compromised code to do whatever you want.

[LoganDark]

LSMs say otherwise

[worthless-trash]

ring0 loadable kernel modules disagree.

[LoganDark]

Only to the extent there is not a deeply embedded core, of course. Or SMM

[worthless-trash]

Neither of those are LSM though right ?

[tandr]

Or malloc(), or open()... They kind of discussing it in the thread on how to prevent this from a malicious actor (or from footgunning yourself), but my understanding it is not all that plain and simple...