KonradKlause

12 ms·

61.
by KonradKlause 15y ago
With LD_PRELOAD you can hook any _function_ call. A syscall is something different. It depends how the syscall wrapper within the libc is coded. Some can be hooked...
62.
by KonradKlause 15y ago
Can you name such a module?
63.
by KonradKlause 15y ago
Using LD_PRELOAD you cannot hook a syscall like open().
64.
by KonradKlause 15y ago
> It uses strncpy_from_user to do this and uses PATH_MAX as the maximum length. So even the linux kernel does rely on the fact that there is a null terminator in the string. But the kernel does not call strlen() on the user-supplied str
65.
by KonradKlause 15y ago
Sure. Suppose your admin is a funny guy and loads this kernel module at April 1st. I (Jonny non-root user) can no longer listen to my favorite mp3, because the kernel module changes the path all the time. The admin loughs and has fun. But t
66.
by KonradKlause 15y ago
Manipulating the cr0 register is _very_ kernel specific.
67.
by KonradKlause 15y ago
And you are obviously missing that modern operating systems have more than just one user. :-)
68.
by KonradKlause 15y ago
BTW: write_cr0(read_cr0() | 0x10000) is a absolute no-go. It's a nice and funny kernel module but it dooms the kernel's security.
69.
by KonradKlause 15y ago
1. A kernel module is more 1337 ;) 2. Using FUSE you would have to guaranty that your fs overlaps all other mounted filesystems.
70.
by KonradKlause 15y ago
Bullshit. Anyone who's using open() can kill the kernel after loading this module.
71.
by KonradKlause 15y ago
p = (char *)(path + strlen(path) - 4); This is a very bad idea as path is user-supplied and has to be treated as malicious. An attacker can omit the string-terminator...
72.
by KonradKlause 15y ago
Of course not. As one of the users@kernel.org members I can tell you that the kernel.org admins are very competent.
73.
by KonradKlause 15y ago
Currently all files get verified. The kernel.org admins have digital signatures of all files...
74.
Kernel.org has been hacked (see site news)(kernel.org)
167 points by KonradKlause 15y ago|56 comments
75.
Bad news for Discordians (ddate disabled by default)(marc.info)
2 points by KonradKlause 15y ago|0 comments
76.
by KonradKlause 15y ago
Damn lkml.org is down: http://marc.info/?l=linux-kernel&m=131462065108921&w...
77.
Ddate(1) disabled by default in future util-linux(lkml.org)
2 points by KonradKlause 15y ago|1 comments
78.
by KonradKlause 15y ago
https://bitcointalk.org/index.php?PHPSESSID=0f35e6daf7c9d42b... made my day. :-)
79.
by KonradKlause 15y ago
Time to fork it! http://knoppix.mirrors.tds.net/pub/linux/frugalware/frugalwa...
80.
Microsoft just want to say Happy Birthday, Linux(youtube.com)
3 points by KonradKlause 15y ago|0 comments
81.
by KonradKlause 15y ago
ACK
82.
by KonradKlause 15y ago
very true. but glibc's abort() is IMHO ok.
83.
by KonradKlause 15y ago
glibc's abort() is even more complex: http://sourceware.org/git/?p=glibc.git;a=blob;f=stdlib/abort...
84.
by KonradKlause 15y ago
Because it's not Microsoft who is contributing. They just paying Linux Kernel developers to build a driver for their HyperV. So, Microsoft does not contribute to Linux. They make it just run on HyperV because some customers need this "featu
85.
by KonradKlause 15y ago
They only thing they are contributing is their hv driver to make Linux run on Mircosoft HyperV. HyperV has to support Linux. And the major hv developer is a former Novell employee.
86.
Lennart Poettering on PulseAudio and systemd(linuxfr.org)
1 points by KonradKlause 15y ago|0 comments
87.
Linus Torvalds Google+(plus.google.com)
2 points by KonradKlause 15y ago|0 comments
88.
by KonradKlause 15y ago
Why this?
89.
by KonradKlause 15y ago
very sad...
90.
by KonradKlause 15y ago
I'm totally impressed that b[o] = ".,-~:;=!*#$@"[N > 0 ? N : 0]; is allowed in C.

More ›