DF-1434 / run.sh
#!/bin/sh # DF-1434 PoC runner # This finding is Operator-only (NATA ATAPI CD). # It CANNOT be triggered on this QEMU guest (no GPU hardware / module not loaded / root-only). # # Reachability: Operator-group only. /dev/acd0 is 0640 root:operator. maxx (uid 1001) is NOT in operator group. Cannot open the device. # echo "DF-1434: Operator-only (NATA ATAPI CD) — not reproducible on this guest" echo "Reason: Operator-group only. /dev/acd0 is 0640 root:operator. maxx (uid 1001) is NOT in operator group. Cannot open the device." exit 0 |