DragonFlyBSD Kernel Audit
DF-2630 / env.txt
← back to finding ↓ download raw
# DF-2630 evidence pack environment

Guest: DragonFly dfbsd 6.5-DEVELOPMENT x86_64 (QEMU/KVM, 6 vCPUs, dfbsd-qemu/vm.sh)
  Baseline (stock):  DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026
                     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC (INVARIANTS)
  Fix kernel:        DragonFly dfbsd 6.5-DEVELOPMENT #1: Sat Aug 29 05:10:55 UTC 2026
                     (make nativekernel + installkernel in guest /usr/src with fix.diff;
                      identical 2630 hunks validated on the 02:23:41 and 02:52:56 builds)
  NOTE: full 30k-line nativekernel build logs were lost with the QEMU disk
        reverts between fix iterations; every build returned BUILD_RC=0 and
        ">>> Kernel install for X86_64_GENERIC completed" (command:
        cd /usr/src && make nativekernel && make installkernel).

hw.ncpu / kern.smp.cpus = 6
vfs.usermount = 0   (mounts performed as root; usermount EPERM for the
                     maxx user per DF-2620 — root-position recorded)
Fix-kernel sysctls: vfs.hammer2.root_timeout = 60 (demo run at 5)

Root fs: hammer2 (vbd0s1d).  Tools: guest newfs_hammer2, vnconfig(4);
host python3 forger.

Images (base created in-guest: truncate -s 64M + newfs_hammer2 -L testvol):
  base.img    md5 956fc18a70f6689a8669e21d372b4eb9   (stock)
  wedge.img   md5 6f179f72d102c11726f33823a7cb2cf0   (testvol pfs_nmasters=0x02)
  control.img md5 c760c5a7cb25f2d5c1808d10a5cb29a3   (testvol pfs_nmasters=0x01)
  wedge vs control: cmp -l reports exactly byte 20973703 (1-based) =
  image offset 0x1400886 = PFS inode block 0x1400800 + 0x86
  (meta.pfs_nmasters), values 02 vs 01.
  Forging: CHECK_NONE (methods=0) on volhdr sroot bref + PFS inode bref,
  volhdr CRC32Cs recomputed (technique proven in DF-2616/DF-2620).