3 ms·
Are you saying that on Android, you can achieve UID=0 via this exploit, but still not write to anywhere important on the device? What are these different "meth
by daveloyall 10y ago
Are you saying that on Android, you can achieve UID=0 via this exploit, but still not write to anywhere important on the device?
What are these different "methods" listed in the table here?
https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs
Can one of those methods allow me to write to some file in /etc? (Which is enough to grant me the access I want, unless selinux is just MAGIC.)
- therein 10y agoSELinux can still prevent you (even if you are `$UID=0`) from performing an operation such as writing to a file under `/etc`. You would need to be able to `setenforce 0 `. A properly configured SELinux context can prevent you from doing that however we are starting to finally see some reports of dirtyc0w successfuly leading to `SELinux status: permissive` and permanent root.