Re: [d-security] Re: ptrace bug: ipsec exploit makes itself suid(0)
Hi
On Fri, Mar 21, 2003 at 03:13:23PM -0000, David Ramsden wrote:
> > On Fri, Mar 21, 2003 at 02:13:01PM -0000, David Ramsden wrote:
> > > I'd like to say that I've had no success with the no-ptrace module (NPT)
> > > (still get root and I've made sure the exploit hasn't been more than
> once, due to making itself suid(0)).
...
> - Loading the module with with: insmod -f npt.o
> (Have to force load the module, unfortunatly)
People reported that exactly this prevents the module from working
although it seems to be loaded!
Maybe it cannot lookup the symbol table correctly if you compile
it against anything else than the source of the running kernel.
Compile with: -I/usr/local/src/kernel/linux-that-I-run/include/
If you do no longer have your kernel source it is sufficient to
copy the /boot/config-2.4.20-my-kernel (or whatever) back, do
"make oldconfig && make dep && make bzImage && make modules" and
then use this tree.
bye,
-christian-
Reply to: