⬢ DragonFlyBSD Kernel Audit
DF-2793 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
{
  "verdict": "reproduced",
  "impact": "leak (cross-jail information: host/foreign-jail rtprio class+priority)",
  "reproduce": {
    "build": "cc -O2 -o jail_rtprio jail_rtprio.c",
    "run": "sudo ./jail_rtprio",
    "expected": "jailed-root child prints 'rtprio(RTP_LOOKUP, <host pid>) = OK type=1 prio=7 <== LEAK' (the host parent's self-set value) while getpriority/setpriority on the same pid return 'No such process'"
  },
  "kernel_refs": [
    "sys/kern/kern_resource.c:582",
    "sys/kern/kern_resource.c:609",
    "sys/kern/kern_resource.c:613",
    "sys/kern/kern_resource.c:701",
    "sys/kern/kern_resource.c:707",
    "sys/kern/kern_resource.c:711",
    "sys/kern/kern_resource.c:104",
    "sys/sys/proc.h:462",
    "sys/kern/kern_jail.c:857"
  ],
  "artifacts": [
    "jail_rtprio.c", "build.sh", "run.sh",
    "run.log", "run.2.log", "env.txt", "fix.diff",
    "README.md", "VERDICT.md", "manifest.json", "verdict.json"
  ]
}