DragonFlyBSD Kernel Audit
DF-2738 / manifest.json
← back to finding ↓ download raw
{
  "verdict": "reproduced",
  "impact": "dos",
  "reproduce": {
    "build": "cc -static -o /tmp/jailwrite jailwrite.c   (on the DragonFly guest)",
    "run": "sh run.sh   (real root: builds writer, creates minimal jail, runs writer inside jail(8), verifies host state change, restores)",
    "expected": "4x 'WROTE-HOST-GLOBAL' from inside the jail; host kern.sugid_coredump flips 0->1 (see run.log / run.2.log)"
  },
  "kernel_refs": [
    "sys/kern/kern_sysctl.c:1438",
    "sys/kern/kern_sysctl.c:1446",
    "sys/sys/sysctl.h:97",
    "sys/kern/kern_jail.c:883",
    "sys/kern/kern_caps.c:311",
    "sys/kern/kern_mib.c:214",
    "sys/kern/kern_proc.c:2204"
  ],
  "artifacts": [
    "jailwrite.c",
    "build.sh",
    "run.sh",
    "run.log",
    "run.2.log",
    "build_fix.log",
    "fix.diff",
    "VERDICT.md",
    "manifest.json",
    "verdict.json"
  ]
}