Comments for Mike Pagano's Weblog http://www.mpagano.com/blog My Digital Contribution Wed, 11 Jul 2012 14:06:09 +0000 hourly 1 http://wordpress.org/?v=3.5.1 Comment on Kernel Maintenance Help Part 2 by Theo Chatzimichos http://www.mpagano.com/blog/?p=167&cpage=1#comment-8472 Theo Chatzimichos Wed, 11 Jul 2012 14:06:09 +0000 http://www.mpagano.com/blog/?p=167#comment-8472 I can help with the quiz, tell anyone to contact me directly on IRC

]]> Comment on Looking for help with kernel maintenance by RDH http://www.mpagano.com/blog/?p=165&cpage=1#comment-8440 RDH Tue, 10 Jul 2012 01:09:46 +0000 http://www.mpagano.com/blog/?p=165#comment-8440 Hello,

I am a young Gentoo user. And using many other GNU/Linux distribution I would like to say that Gentoo just fits me. I would love to be able to contribute, and I’m SURE I can find time to help make Gentoo keep going.

]]> Comment on Looking for help with kernel maintenance by franky http://www.mpagano.com/blog/?p=165&cpage=1#comment-8417 franky Mon, 09 Jul 2012 19:32:42 +0000 http://www.mpagano.com/blog/?p=165#comment-8417 Well, let me just say this:

Thank you so far for your hard work, for bumping all the kernel versions; all in your rare free time.

You deserve a warmhearted THANK YOU!

]]> Comment on Looking for help with kernel maintenance by tsue http://www.mpagano.com/blog/?p=165&cpage=1#comment-8396 tsue Sun, 08 Jul 2012 23:05:11 +0000 http://www.mpagano.com/blog/?p=165#comment-8396 Just messaged you on IRC, though I don’t see an email address. =) Let me know if I can help out.

]]> Comment on Looking for help with kernel maintenance by Dave Day http://www.mpagano.com/blog/?p=165&cpage=1#comment-8334 Dave Day Sat, 07 Jul 2012 02:12:54 +0000 http://www.mpagano.com/blog/?p=165#comment-8334 I responded to this earlier today but my response has disappeared. If it was deleted because I am not an appropriate candidate, I will understand.

But I thought I would check just in case it was accidentally deleted.

Thanks,
Dave Day`
david.scott.day@gmail.com

]]> Comment on Looking for help with kernel maintenance by DaveDay http://www.mpagano.com/blog/?p=165&cpage=1#comment-8305 DaveDay Fri, 06 Jul 2012 15:59:14 +0000 http://www.mpagano.com/blog/?p=165#comment-8305 I would be happy to give it a go. I would pretty much be starting from scratch though.
I am retired (still work a little part time) but have time now and the interest. You might get 10 years out of me unless you find other things for me to do elsewhere.

I have been using Gentoo since 2005, both stable and unstable. I have no particular kernel knowledge and unfortunately I have always been a genkernel user. I suppose that is a negative. I am pretty comfortable with git as I have been using it for MythTV and vifm and a few other projects that I modify for my own use (I haven’t been using the Gentoo ebuilds until quite recently as I wanted more frequent updates than Gentoo provides).

A long time ago I was an AT&T UNIX/C programmer but I was hired away as a consultant for NCR on their sales team for GTE and havent really done much programming since. I am trying to get back into Linux on an amateur basis because I enjoy it.

I would guess that if you can be patient with me for a little longer than your average helper would take, it would pay off in a longer than normal relationship.

Let me know what you think.

Thanks,
Dave Day

]]> Comment on Update: Linux Local Privilege Escalation via SUID by Serge Gavrilov http://www.mpagano.com/blog/?p=163&cpage=1#comment-1176 Serge Gavrilov Tue, 24 Jan 2012 21:23:23 +0000 http://www.mpagano.com/blog/?p=163#comment-1176 What about 2.6.39? They said 2.6.39 is fist major kernel release, which is affected.

]]> Comment on Gentoo Kernel release for Linux Local Privilege Escalation via SUID /proc/pid/mem by noother http://www.mpagano.com/blog/?p=160&cpage=1#comment-1169 noother Tue, 24 Jan 2012 14:55:27 +0000 http://www.mpagano.com/blog/?p=160#comment-1169 I just upgraded to 3.2.1-r1 and unfortunately, the exploit still works.

]]> Comment on Gentoo Kernel release for Linux Local Privilege Escalation via SUID /proc/pid/mem by Yuri http://www.mpagano.com/blog/?p=160&cpage=1#comment-1159 Yuri Tue, 24 Jan 2012 05:55:57 +0000 http://www.mpagano.com/blog/?p=160#comment-1159 guv@noname ~/bin $ uname -a
Linux noname.neo 3.1.10-gentoo #1 SMP Tue Jan 24 11:31:39 YEKT 2012 x86_64 Intel(R) Celeron(R) CPU E3300 @ 2.50GHz GenuineIntel GNU/Linux
guv@noname ~/bin $ ./mempodipper -o 0×402178
===============================
= Mempodipper =
= by zx2c4 =
= Jan 21, 2012 =
===============================

[+] Opening socketpair.
[+] Waiting for transferred fd in parent.
[+] Executing child from child fork.
[+] Opening parent mem /proc/10330/mem in child.
[+] Sending fd 5 to parent.
[+] Received fd at 5.
[+] Assigning fd 5 to stderr.
[+] Calculating su padding.
[+] Seeking to offset 0x40215d.
[+] Executing su with shellcode.
sh-4.2# suid
sh: suid: command not found
sh-4.2# uid
sh: uid: command not found
sh-4.2# id
uid=0(root) gid=0(root) groups=0(root),6(disk),10(wheel),18(audio),19(cdrom),27(video),46(plugdev),80(cdrw),85(usb),104(power),199(messagebus)
sh-4.2# whoami
root
sh-4.2# exit
exit

]]> Comment on Gentoo Kernel release for Linux Local Privilege Escalation via SUID /proc/pid/mem by Oliver http://www.mpagano.com/blog/?p=160&cpage=1#comment-1155 Oliver Mon, 23 Jan 2012 22:12:44 +0000 http://www.mpagano.com/blog/?p=160#comment-1155 Addtional info:
seems like the patch is not applied:
/usr/src $ diff linux-3.2.1-gentoo-r1/fs/proc/base.c linux-3.2.1-gentoo/fs/proc/base.c
/usr/src $

(just deny the posting of my comments on this blog…)

Cheers,
Oliver

]]>