DragonFlyBSD Kernel Audit
DF-0716 / env.txt
← back to finding ↓ download raw
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
kern.version: DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026
cc 8.3 [DragonFly] Release/2019-02-22

Kernel config: X86_64_GENERIC (options INVARIANTS enabled)
NETSMB: NOT in X86_64_GENERIC (smb_subr.c is only in the smbfs.ko module)

Module state:
  smbfs.ko: loaded (root-only kldload)
  strdup_test.ko: loaded (test harness, root-only)

Device permissions:
  /dev/nsmb:       crwx------ root:wheel (0700 — root-only)
  /dev/strdup_test: crw------- root:wheel (0600 — root-only test harness)

Sysctls:
  debug.use_weird_array = 0 (no 0xdeadc0de slab poisoning by default)
  vm.randomize_mmap = 0 (no KASLR)
  vfs.usermount = 0

CPU features: 0x1783fbfd (SMAP OFF, SMEP OFF — no SMAP/SMEP bypass needed)

Privilege boundary:
  /dev/nsmb is 0700 root:wheel (smb_dev.c:355-356 make_autoclone_dev).
  Opening /dev/nsmb requires root. Loading smbfs.ko requires root (kldload).
  An unprivileged user (maxx, uid 1001) cannot open /dev/nsmb or load the module.
  This is a root→kernel hardening gap, NOT an unprivileged escalation.