DF-2268 / build.sh
#!/bin/sh # DF-2268 build.sh — no runnable PoC on this guest (HW-gated: requires a malicious # SCSI/USB CD target supplying a crafted READ TOC; /dev/cd0 is 0640 root:operator # and maxx is in no privileged group). This script documents the gate. # # The defense-in-depth fix is validated to compile: see fix.diff + fix_build.log # (nativekernel rc=0, -Werror, -DINVARIANTS). set -e echo "DF-2268: no buildable PoC — bug is HW/device gated on this guest." echo "See VERDICT.md (gate analysis + source trace) and fix.diff (validated fix)." exit 0 |