DF-0716 / env.txt
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64 kern.version: DragonFly 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 cc 8.3 [DragonFly] Release/2019-02-22 Kernel config: X86_64_GENERIC (options INVARIANTS enabled) NETSMB: NOT in X86_64_GENERIC (smb_subr.c is only in the smbfs.ko module) Module state: smbfs.ko: loaded (root-only kldload) strdup_test.ko: loaded (test harness, root-only) Device permissions: /dev/nsmb: crwx------ root:wheel (0700 — root-only) /dev/strdup_test: crw------- root:wheel (0600 — root-only test harness) Sysctls: debug.use_weird_array = 0 (no 0xdeadc0de slab poisoning by default) vm.randomize_mmap = 0 (no KASLR) vfs.usermount = 0 CPU features: 0x1783fbfd (SMAP OFF, SMEP OFF — no SMAP/SMEP bypass needed) Privilege boundary: /dev/nsmb is 0700 root:wheel (smb_dev.c:355-356 make_autoclone_dev). Opening /dev/nsmb requires root. Loading smbfs.ko requires root (kldload). An unprivileged user (maxx, uid 1001) cannot open /dev/nsmb or load the module. This is a root→kernel hardening gap, NOT an unprivileged escalation.