5 ms·

Haha, so you can't even answer the question lol. Yeah, it's clear you have no clue about SELinux at all. What is with you and putting so much effort just to ar

Haha, so you can't even answer the question lol. Yeah, it's clear you have no clue about SELinux at all. What is with you and putting so much effort just to argue out of loyalty and emotion when you don't even know the thing you are arguing against, aside from assumptions? Pledge is a goddamn toy and it's hilarious you think otherwise. Pledge isn't going to do ANYTHING to protect, say, a complex database server or any number of third party programs that need all kinds of access, and require being able to make all types of syscalls. You've parroted my own reply back at me, without bothering to comprehend it or realize that it doesn't apply at all in the way you've bastardized it and tried to force it to. You clearly, CLEARLY have no clue at all what you are talking about, and are basically just the OBSD version of a linux zealot stereotype. In short, you're a tool. You clearly need to have the last word due to your ego, so have at it, but I won't waste my time by humoring you further. It's genuinely a shame I can't block you and will still be notified of whatever noise you make next.

ori_b 4y ago
> Pledge is a goddamn toy and it's hilarious you think otherwise. Pledge isn't going to do ANYTHING to protect, say, a complex database server or any number of third party programs that need all kinds of access, and require being able to make all types of syscalls. Here's a program that will run an arbitrary command under the same restrictions as Chrome. Presumably, Chrome counts as a complex third party program. #include <stdio.h> #include <unistd.h> #include <err.h> #define CHROME_MAIN_CONTENT_PLEDGE \ "rpath wpath cpath stdio tmppath dns inet flock " "unix proc prot_exec tty sendfd recvfd exec mcast " "ps drm fattr route getpw vminfo video" int main(int argc, char **argv) { if(argc < 2) errx(1, "usage: %s cmd\n", argv[0]); if(pledge(CHROME_MAIN_CONTENT_PLEDGE, CHROME_MAIN_CONTENT_PLEDGE) == -1) err(1, "pledge"); if(unveil("/var/empty", "r") == -1) err(1, "unveil"); if(unveil(NULL, NULL) == -1) err(1, "unveil"); execv(argv[1], &argv[1]); err(1, "exec"); } compile as: cc -o asroot asroot.c run as: doas ./asroot your-exploit-command What exploit command you do use to break out?
- Zurrrrr 4y ago
  That isn't the context of the conversation. You really are very disingenuous. How about you show me how you lock down an OBSD system that is running, say Oracle. With pledge.
  - ori_b 4y ago
    You keep insisting that if you can run pledged and unveiled code as root, you can break out. Let's get that part of the discussion out of the way first, and then I'll happily switch tracks to pledging oracle. Though I'm not sure why you think it'd be much harder than pledging Chrome or Firefox.
    - Zurrrrr 4y ago
      Oracle, and third party software was the example I used from the start. SELinux absolutely can protect Oracle or any complex program. If you want t discuss this further, illustrate how pledge can protect against a remote root exploit in Oracle as good or better than SELinux can.
      - ori_b 4y ago
        Again, can you give an example of an jailbreak you're thinking of? So far, I don't even think you've given a clear explanation of your threat model. Once we have that, we can have a discussion about Oracle fits into it -- but until then, there's no substance. What operations would you use to break out of the above sandbox? Once you give me that, I'll happily discuss the details.
        Zurrrrr 4y ago
        Again, from the start, my scenario and example was third party software. Feel free to re-read the thread from the start if you want to confirm that. I'm not interested in retreading anything. I don't even want to continue discussing anything with you as it is, but I'm willing to see where this goes. Show how pledge can protect against a remote root compromise in oracle. I doubt it can, you've been insisting pledge is all OpenBSD needs to protect against such attacks. I'm not answering any more questions or taking any more detours. Stop being intellectually dishonest. Either admit that you don't know for sure that pledge can protect against a remote root compromise in complex third party software like oracle and simply think it can, or show how it can. If you can't do that, we're at an impasse and there won't be further discussion. Unless you post some kind of baiting comment I suppose, which wouldn't surprise me at this point.

ori_b 4y ago

> Pledge is a goddamn toy and it's hilarious you think otherwise. Pledge isn't going to do ANYTHING to protect, say, a complex database server or any number of third party programs that need all kinds of access, and require being able to make all types of syscalls. Here's a program that will run an arbitrary command under the same restrictions as Chrome. Presumably, Chrome counts as a complex third party program. #include <stdio.h> #include <unistd.h> #include <err.h> #define CHROME_MAIN_CONTENT_PLEDGE \ "rpath wpath cpath stdio tmppath dns inet flock " "unix proc prot_exec tty sendfd recvfd exec mcast " "ps drm fattr route getpw vminfo video" int main(int argc, char **argv) { if(argc < 2) errx(1, "usage: %s cmd\n", argv[0]); if(pledge(CHROME_MAIN_CONTENT_PLEDGE, CHROME_MAIN_CONTENT_PLEDGE) == -1) err(1, "pledge"); if(unveil("/var/empty", "r") == -1) err(1, "unveil"); if(unveil(NULL, NULL) == -1) err(1, "unveil"); execv(argv[1], &argv[1]); err(1, "exec"); } compile as: cc -o asroot asroot.c run as: doas ./asroot your-exploit-command What exploit command you do use to break out?

Zurrrrr 4y ago
That isn't the context of the conversation. You really are very disingenuous. How about you show me how you lock down an OBSD system that is running, say Oracle. With pledge.
- ori_b 4y ago
  You keep insisting that if you can run pledged and unveiled code as root, you can break out. Let's get that part of the discussion out of the way first, and then I'll happily switch tracks to pledging oracle. Though I'm not sure why you think it'd be much harder than pledging Chrome or Firefox.
  - Zurrrrr 4y ago
    Oracle, and third party software was the example I used from the start. SELinux absolutely can protect Oracle or any complex program. If you want t discuss this further, illustrate how pledge can protect against a remote root exploit in Oracle as good or better than SELinux can.
    - ori_b 4y ago
      Again, can you give an example of an jailbreak you're thinking of? So far, I don't even think you've given a clear explanation of your threat model. Once we have that, we can have a discussion about Oracle fits into it -- but until then, there's no substance. What operations would you use to break out of the above sandbox? Once you give me that, I'll happily discuss the details.
      - Zurrrrr 4y ago
        Again, from the start, my scenario and example was third party software. Feel free to re-read the thread from the start if you want to confirm that. I'm not interested in retreading anything. I don't even want to continue discussing anything with you as it is, but I'm willing to see where this goes. Show how pledge can protect against a remote root compromise in oracle. I doubt it can, you've been insisting pledge is all OpenBSD needs to protect against such attacks. I'm not answering any more questions or taking any more detours. Stop being intellectually dishonest. Either admit that you don't know for sure that pledge can protect against a remote root compromise in complex third party software like oracle and simply think it can, or show how it can. If you can't do that, we're at an impasse and there won't be further discussion. Unless you post some kind of baiting comment I suppose, which wouldn't surprise me at this point.