⬢ DragonFlyBSD Kernel Audit
DF-5755 / run.log
← back to finding ↓ download raw
=== cleanup ===
=== fresh image ===
=== mount + create + list (as nobody inside) ===
[+] mounted /dev/vn0 at /m55 (KICONV cs_local=UTF-8 cs_dos=UTF-8)
[+] privileges dropped: uid=65534 gid=65534
[create 0] raw="OV\xc0\xafSLASH" -> OK (fd=3 errno-path=-)
[create 1] raw="OV\xc0\xaeDOT" -> OK (fd=3 errno-path=-)
[create 2] raw="OV\xe0\x80\xafS3" -> OK (fd=3 errno-path=-)
[create 3] raw="plainok" -> OK (fd=3 errno-path=-)
--- dirents of /m55/pub:
    namlen=1 name="."
      hex: 2e 
    namlen=2 name=".."
      hex: 2e 2e 
    namlen=8 name="OV/SLASH"
      hex: 4f 56 2f 53 4c 41 53 48 
    namlen=6 name="OV.DOT"
      hex: 4f 56 2e 44 4f 54 
    namlen=5 name="OV/S3"
      hex: 4f 56 2f 53 33 
    namlen=7 name="plainok"
      hex: 70 6c 61 69 6e 6f 6b 
[+] done (unmount from shell)
=== unmount + dump raw image ===
[FOUND] OV/S3 LFN part1 (O V / S 3) [units 0-4, wePart1] at file offset 0x142c1:
        context (from 0x142b1): 5d 4b 5d 00 00 69 50 4b 5d 04 00 01 00 00 00 41 4f 00 56 00 2f 00 53 00 33 00 0f 00 bb 00 00 ff ff ff ff ff ff ff ff ff ff 00 
        LFN seq=0x41 attr@+11=0x0f
[FOUND] OV/SLASH LFN part1 (O V / S L) [units 0-4, wePart1] at file offset 0x14241:
        context (from 0x14231): 5d 4b 5d 00 00 69 50 4b 5d 00 00 00 00 00 00 41 4f 00 56 00 2f 00 53 00 4c 00 0f 00 31 41 00 53 00 48 00 00 00 ff ff ff ff 00 
        LFN seq=0x41 attr@+11=0x0f
[FOUND] OV/SLASH LFN part2 (A S H NUL) [units 5-8, wePart2] at file offset 0x1424e:
        context (from 0x1423e): 00 00 41 4f 00 56 00 2f 00 53 00 4c 00 0f 00 31 41 00 53 00 48 00 00 00 ff ff ff ff 00 00 ff ff ff ff 4f 56 2f 53 4c 41 
        LFN seq=0x31 attr@+11=0xff
[FOUND] OV.DOT LFN part1 (O V . D O) [units 0-4, wePart1] at file offset 0x14281:
        context (from 0x14271): 5d 4b 5d 00 00 69 50 4b 5d 03 00 01 00 00 00 41 4f 00 56 00 2e 00 44 00 4f 00 0f 00 d2 54 00 00 00 ff ff ff ff ff ff ff ff 00 
        LFN seq=0x41 attr@+11=0x0f
[FOUND] OV.DOT LFN part2 (T NUL) [unit 5, wePart2] at file offset 0x1428e:
        context (from 0x1427e): 00 00 41 4f 00 56 00 2e 00 44 00 4f 00 0f 00 d2 54 00 00 00 ff ff ff ff ff ff ff ff 00 00 ff ff ff ff 4f 56 
        LFN seq=0xd2 attr@+11=0xff
[FOUND] 8.3 alias 'OV/SLASH   ' (raw '/' in short entry) at file offset 0x14260:
        context (from 0x14250): 53 00 48 00 00 00 ff ff ff ff 00 00 ff ff ff ff 4f 56 2f 53 4c 41 53 48 20 20 20 20 00 31 69 50 4b 5d 4b 5d 00 00 69 50 4b 5d 03 
        LFN seq=0xff attr@+11=0x20
[FOUND] 8.3 alias 'OV/S3   ' (raw '/' in short entry) at file offset 0x142e0:
        context (from 0x142d0): ff ff ff ff ff ff ff ff ff ff 00 00 ff ff ff ff 4f 56 2f 53 33 20 20 20 20 20 20 20 00 31 69 50 4b 5d 4b 5d 00 00 69 50 4b 5d 05 
        LFN seq=0xff attr@+11=0x20
RC_DUMP=0