Re: rtld and noexec

2011-12-04 Thread joris dedieu
2011/12/2 Alexander Kabaev : > On Fri, 2 Dec 2011 18:22:57 +0100 > joris dedieu wrote: > >> Hi, >> >> Here is a patch I use to prevent loading a shared object from a noexec >> mountpoint.  It's an easy way, I found, after the last root exploit >> ((http://seclists.org/fulldisclosure/2011/Nov/452),

Re: "ps -e" without procfs(5)

2011-12-04 Thread Jilles Tjoelker
On Sat, Oct 29, 2011 at 01:32:39PM +0300, Mikolaj Golub wrote: > [KERN_PROC_AUXV requires just p_cansee()] If we are ever going to do ASLR, the AUXV information tells an attacker where the stack, executable and RTLD are located, which defeats much of the point of randomizing the addresses in the f

Re: "ps -e" without procfs(5)

2011-12-04 Thread Robert N. M. Watson
On 4 Dec 2011, at 14:31, Jilles Tjoelker wrote: > On Sat, Oct 29, 2011 at 01:32:39PM +0300, Mikolaj Golub wrote: >> [KERN_PROC_AUXV requires just p_cansee()] > > If we are ever going to do ASLR, the AUXV information tells an attacker > where the stack, executable and RTLD are located, which defe

Re: rtld and noexec

2011-12-04 Thread Kostik Belousov
On Sun, Dec 04, 2011 at 02:17:43PM +0100, joris dedieu wrote: > 2011/12/2 Alexander Kabaev : > > On Fri, 2 Dec 2011 18:22:57 +0100 > > joris dedieu wrote: > > > >> Hi, > >> > >> Here is a patch I use to prevent loading a shared object from a noexec > >> mountpoint.  It's an easy way, I found, afte

Re: "ps -e" without procfs(5)

2011-12-04 Thread Mikolaj Golub
On Sun, 4 Dec 2011 15:57:06 + Robert N. M. Watson wrote: RNMW> On 4 Dec 2011, at 14:31, Jilles Tjoelker wrote: >> On Sat, Oct 29, 2011 at 01:32:39PM +0300, Mikolaj Golub wrote: >>> [KERN_PROC_AUXV requires just p_cansee()] >> >> If we are ever going to do ASLR, the AUXV information tel

Re: "ps -e" without procfs(5)

2011-12-04 Thread Mikolaj Golub
On Sun, 4 Dec 2011 15:57:06 + Robert N. M. Watson wrote: RNMW> On 4 Dec 2011, at 14:31, Jilles Tjoelker wrote: >> On Sat, Oct 29, 2011 at 01:32:39PM +0300, Mikolaj Golub wrote: >>> [KERN_PROC_AUXV requires just p_cansee()] >> >> If we are ever going to do ASLR, the AUXV information tel

Re: "ps -e" without procfs(5)

2011-12-04 Thread Jilles Tjoelker
On Sun, Dec 04, 2011 at 10:58:10PM +0200, Mikolaj Golub wrote: > RNMW> Agreed. In general, my view is that p_cansee() should be used for very > RNMW> few of our process inspection APIs. I like your example of ASLR > RNMW> especially, as it illustrates how debugging information can aid even > RN

Re: Invalid memory stats from vmstat and sysctl vm.vmtotal?

2011-12-04 Thread Andriy Gapon
on 02/12/2011 19:13 Steven Hartland said the following: [snip] > Given this starting point the following links provided me with addtional > information:- > http://www.freebsd.org/doc/en/books/arch-handbook/vm.html > http://www.freebsd.org/doc/en/books/design-44bsd/overview-memory-management.html >

strange printf(9) format specifier ("Z") in dev/drm code

2011-12-04 Thread Alexander Best
hi there, i was going through the clang warnings from a GENERIC buildkernel and noticed the following: ===> drm/mga (all) /usr/subversion-src/sys/modules/drm/mga/../../../dev/drm/mga_state.c:56:2: error: invalid conversion specifier 'Z' [-Werror,-Wformat-invalid-specifier] BEGIN_DMA(2);

Flash FS for NetBSD

2011-12-04 Thread Oliver Pinter
Hi all! Today found this procejt: http://chewiefs.sed.hu/ When I good remember, Arounld searched flash fs for bsd, so cc-d. ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any m

Re: Fwd: my git development snapshot(s)

2011-12-04 Thread Arnaud Lacombe
Hi, On Fri, Oct 7, 2011 at 6:28 AM, Ulrich Spörlein wrote: > On Fri, 2011-09-30 at 15:41:41 -0400, Arnaud Lacombe wrote: >> Hi, >> >> On Mon, Sep 26, 2011 at 2:23 PM, Arnaud Lacombe wrote: >> > Hi, >> > >> > On Thu, Sep 22, 2011 at 5:26 PM, Ulrich Spörlein >> > wrote: >> >> On Thu, 2011-09-22