Názor ke článku Strašlivý exploit na 2.6.17 - 2.6.24! od raven4 - Zabyvam se bezpecnosti profesne, ucim Linux na VS...

Zabyvam se bezpecnosti profesne, ucim Linux na VS a musim potvrdit, ze k memu neprijemnemu zjisteni exploit funguje i na mem 64bit Susackovi 10.3 jadro 2.6.23.14-ccj63-default.

Funkcnost 100%

Ale nedalo mi to a hned jsem na danou "utilitku" aplikoval AppArmor a hle...funkcnost "utilitky" NULOVA!!!!

Pro srovnani vypis pred a po vytvoreni AppArmor profilu:
./a.out
-----------------------------------
Linux vmsplice Local Root Exploit
By qaaz
-----------------------------------
[+] mmap: 0x100000000000 .. 0x100000001000
[+] page: 0x100000000000
[+] page: 0x100000000038
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4038
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0x2b8143521000 .. 0x2b8143553000
[+] root

a PO:
./a.out
-----------------------------------
Linux vmsplice Local Root Exploit
By qaaz
-----------------------------------
[+] mmap: 0x100000000000 .. 0x100000001000
[+] page: 0x100000000000
[+] page: 0x100000000038
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4038
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0x2af21bfbf000 .. 0x2af21bff1000
[+] root
[-] /bin/bash: Permission denied

v logu se objevi :
type=APPARMOR_DE­NIED msg=audit(12027134­98.383:7): type=1503 operation="ino­de_permission" requested_mask="x" denied_mask="x" name="/bin/bash" pid=14832 profile="/home/r4/a­.out"
:))))))))))

Obcas se paranoia vyplaci a proto aplikace kterym neduveruji, vzdy pred spustenim nejdrive vytvorim AppArmor profil, pote spustim a kouknu do logu, co aplikace dela...

Preji hezky den, Raven4

raven4@jabber.cz