[BUG?][2.5.66] was: Re: How to fix the ptrace flaw without

Chuck Ebbert (76306.1226@compuserve.com)
Fri, 4 Apr 2003 11:46:02 -0500


Alan wrote:

.>> # echo 'x'>/proc/sys/kernel/modprobe
.>> bash: /proc/sys/kernel/modprobe: No such file or directory

.>Thats not a sufficient fix except for people blindly running the
.>example exploit

I know that -- it's why I wrote pt_fix after seeing the problems
people were having coming up with a stopgap.

BTW putting a "ud2a" instruction at the
entry point to sys_ptrace causes problems on SMP 2.5.66.
On uniprocessor, all attempts to use strace fail with SIGSEGV as
expected, but on SMP only the first time does. Further
attempts to use strace result in a zombie strace child process hung
up at the end of do_exit() (hand copied from sysrq-t):

do_exit+0x2f7/0x310
die+0x7f/0x90
do_invalid_op+0x0/0xa0
do_invalid_op+0x87/0xa0
sys_ptrace+0x0/0x6c0
do_page_fault+0x120/0x426
error_code+0x2d/0x38
sys_ptrace+0x0/0x6c0
syscall_call+0x7/0xb

2.4.21pre6 handles this OK.

--
 Chuck
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/