DF-2738 / manifest.json
{ "verdict": "reproduced", "impact": "dos", "reproduce": { "build": "cc -static -o /tmp/jailwrite jailwrite.c (on the DragonFly guest)", "run": "sh run.sh (real root: builds writer, creates minimal jail, runs writer inside jail(8), verifies host state change, restores)", "expected": "4x 'WROTE-HOST-GLOBAL' from inside the jail; host kern.sugid_coredump flips 0->1 (see run.log / run.2.log)" }, "kernel_refs": [ "sys/kern/kern_sysctl.c:1438", "sys/kern/kern_sysctl.c:1446", "sys/sys/sysctl.h:97", "sys/kern/kern_jail.c:883", "sys/kern/kern_caps.c:311", "sys/kern/kern_mib.c:214", "sys/kern/kern_proc.c:2204" ], "artifacts": [ "jailwrite.c", "build.sh", "run.sh", "run.log", "run.2.log", "build_fix.log", "fix.diff", "VERDICT.md", "manifest.json", "verdict.json" ] } |