Re: rsbac on raspberry pi

Jens Kasten <[email protected]> Mon, 06 Jul 2015 22:15:39 +0200
Newsgroups gmane.linux.rsbac
Message-ID <[email protected]>
paxtest is fixed, tested on amd64 and arm. Its was a typo in the 
shellcode.h.


https://www.kasten-edv.de/download/rsbac/paxtest-0.9.13-r1.ebuild
https://www.kasten-edv.de/download/rsbac/paxtest-0.9.13-r1.tar.gz

I have my own portage-overlay. So for testing you have to put the 
paxtest-0.9.13-r1.tar.gz into /usr/portage/distfiles.
The ebuild put into /usr/portage/app-admin/paxtest.
Then cd to /usr/portage/app-admin/paxtest.
Do ebuild paxtest-0.9.13-r1.ebuild digest.
Then emerge paxtest but keywords has to set.



Am 2015-07-06 07:45, schrieb Javier Juan Martínez Cabezón:
> Damn! How did you do?!, Are you running the modified kernel/firmware
> owned by raspberry pi fundation?, ¿rsbac sources?, ¿did you patched 
> it
> by hand? ¿had to solve rejections?, did you need to dance around a 
> camp
> fire?.
> 
> I'm compiling a gentoo hardened in a raspberry pi 2 model B. ¿Can you
> send your .config? ¿Did you have troubles building paxtest?
> 
> Jens 1 tazok 0
> 
> 
> 
> 
> 
> On 05/07/15 23:16, Jens Kasten wrote:
>> Hi,
>> 
>> on my Raspberry Pi runs a Gentoo/hardened with RSBAC and PAX  :D
>> 
>> Linux raspberry-pi 3.18.16-rsbac-4+ #2 PREEMPT Sun Jul 5 22:49:47 CEST
>> 2015 armv6l BCM2708 GNU/Linux
>> 
>> For PAX this options must at moment disabled:
>>     CONFIG_PAX_REFCOUNT, CONFIG_PAX_USERCOPY
>> 
>> There is an issue left with PAX but need a bit time.
>> 
>> 
>> Jens
>> 
>> _______________________________________________
>> rsbac mailing list
>> [email protected]
>> http://www.rsbac.org/mailman/listinfo/rsbac
> 
> _______________________________________________
> rsbac mailing list
> [email protected]
> http://www.rsbac.org/mailman/listinfo/rsbac

_______________________________________________
rsbac mailing list
[email protected]
http://www.rsbac.org/mailman/listinfo/rsbac
paxtest.log-amd64 (text/plain, 2.4 KB)
PaXtest - Copyright(c) 2003-2014 by Peter Busser <[email protected]> and Brad Spengler <[email protected]>
Released under the GNU Public Licence version 2 or later

Mode: blackhat
Linux malo 3.18.17-rsbac+ #1 SMP Sat Jul 4 14:09:04 CEST 2015 x86_64 Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz GenuineIntel GNU/Linux

Executable anonymous mapping             : Killed
Executable bss                           : Killed
Executable data                          : Killed
Executable heap                          : Killed
Executable stack                         : Killed
Executable shared library bss            : Killed
Executable shared library data           : Killed
Executable anonymous mapping (mprotect)  : Killed
Executable bss (mprotect)                : Killed
Executable data (mprotect)               : Killed
Executable heap (mprotect)               : Killed
Executable stack (mprotect)              : Killed
Executable shared library bss (mprotect) : Killed
Executable shared library data (mprotect): Killed
Writable text segments                   : Killed
Anonymous mapping randomisation test     : 29 quality bits (guessed)
Heap randomisation test (ET_EXEC)        : 35 quality bits (guessed)
Heap randomisation test (PIE)            : 35 quality bits (guessed)
Main executable randomisation (ET_EXEC)  : 29 quality bits (guessed)
Main executable randomisation (PIE)      : 29 quality bits (guessed)
Shared library randomisation test        : 29 quality bits (guessed)
VDSO randomisation test                  : 29 quality bits (guessed)
Stack randomisation test (SEGMEXEC)      : 35 quality bits (guessed)
Stack randomisation test (PAGEEXEC)      : 35 quality bits (guessed)
Arg/env randomisation test (SEGMEXEC)    : 35 quality bits (guessed)
Arg/env randomisation test (PAGEEXEC)    : 35 quality bits (guessed)
Randomization under memory exhaustion @~0: 29 bits (guessed)
Randomization under memory exhaustion @0 : 29 bits (guessed)
Return to function (strcpy)              : paxtest: return address contains a NULL byte.
Return to function (memcpy)              : *** buffer overflow detected ***: rettofunc2 terminated; report to <http://bugs.gentoo.org/>
Killed
Return to function (strcpy, PIE)         : paxtest: return address contains a NULL byte.
Return to function (memcpy, PIE)         : *** buffer overflow detected ***: rettofunc2x terminated; report to <http://bugs.gentoo.org/>
Killed
paxtest.log-arm (application/octet-stream, 2.7 KB) - not displayed