⬢ DragonFlyBSD Kernel Audit
DF-2756 / run.log
← back to finding ↓ download raw
maxx@dfbsd$ /tmp/dirread2 /boot
total read = 1024
RESIDUE 'ZZsecretsalt' at raw offset 468
RESIDUE 'ZZsecretsalt' at raw offset 520
RESIDUE 'ZZsecretsalt' at raw offset 548
RESIDUE 'ZZsecretsalt' at raw offset 576
RESIDUE 'ZZsecretsalt' at raw offset 604
RESIDUE 'ZZsecretsalt' at raw offset 632
RESIDUE 'ZZsecretsalt' at raw offset 660
RESIDUE 'ZZsecretsalt' at raw offset 688
residue hits = 8
dirent off=444 name='boot' reclen=68 slack_nz_bytes=22: 34 00 08 12 5a 5a 73 65 63 72 65 74 73 61 6c 74 31 2e 66 69 6c 65 00 8d 00 00 00 00
dirent off=512 name='ZZsecret' reclen=512 slack_nz_bytes=146: 32 2e 66 69 6c 65 00 8d 19 00 00 00 1c 00 08 12 5a 5a 73 65 63 72 65 74 73 61 6c 74
...
(setup: root created+deleted /boot/ZZsecretsalt[1-8].file; unpriv user then read() the directory)
first run: read(/boot) = 512 errno=0  (raw on-disk directory blocks returned; no EISDIR)