||A BSD Rootkit Primer|
As you said; but why the hell should I read such a book - audiance is limited, target systems are limited, success (!) is limited.
Only by one kernel recompile one can gain freedom from these rootkits.
Nice book, but some sort of academic.