Re: rsbac on raspberry pi
Jens Kasten <[email protected]> Mon, 06 Jul 2015 22:15:39 +0200
| Newsgroups | gmane.linux.rsbac |
|---|---|
| Message-ID | <[email protected]> |
paxtest is fixed, tested on amd64 and arm. Its was a typo in the shellcode.h. https://www.kasten-edv.de/download/rsbac/paxtest-0.9.13-r1.ebuild https://www.kasten-edv.de/download/rsbac/paxtest-0.9.13-r1.tar.gz I have my own portage-overlay. So for testing you have to put the paxtest-0.9.13-r1.tar.gz into /usr/portage/distfiles. The ebuild put into /usr/portage/app-admin/paxtest. Then cd to /usr/portage/app-admin/paxtest. Do ebuild paxtest-0.9.13-r1.ebuild digest. Then emerge paxtest but keywords has to set. Am 2015-07-06 07:45, schrieb Javier Juan Martínez Cabezón: > Damn! How did you do?!, Are you running the modified kernel/firmware > owned by raspberry pi fundation?, ¿rsbac sources?, ¿did you patched > it > by hand? ¿had to solve rejections?, did you need to dance around a > camp > fire?. > > I'm compiling a gentoo hardened in a raspberry pi 2 model B. ¿Can you > send your .config? ¿Did you have troubles building paxtest? > > Jens 1 tazok 0 > > > > > > On 05/07/15 23:16, Jens Kasten wrote: >> Hi, >> >> on my Raspberry Pi runs a Gentoo/hardened with RSBAC and PAX :D >> >> Linux raspberry-pi 3.18.16-rsbac-4+ #2 PREEMPT Sun Jul 5 22:49:47 CEST >> 2015 armv6l BCM2708 GNU/Linux >> >> For PAX this options must at moment disabled: >> CONFIG_PAX_REFCOUNT, CONFIG_PAX_USERCOPY >> >> There is an issue left with PAX but need a bit time. >> >> >> Jens >> >> _______________________________________________ >> rsbac mailing list >> [email protected] >> http://www.rsbac.org/mailman/listinfo/rsbac > > _______________________________________________ > rsbac mailing list > [email protected] > http://www.rsbac.org/mailman/listinfo/rsbac _______________________________________________ rsbac mailing list [email protected] http://www.rsbac.org/mailman/listinfo/rsbac
paxtest.log-amd64
(text/plain, 2.4 KB)
PaXtest - Copyright(c) 2003-2014 by Peter Busser <[email protected]> and Brad Spengler <[email protected]> Released under the GNU Public Licence version 2 or later Mode: blackhat Linux malo 3.18.17-rsbac+ #1 SMP Sat Jul 4 14:09:04 CEST 2015 x86_64 Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz GenuineIntel GNU/Linux Executable anonymous mapping : Killed Executable bss : Killed Executable data : Killed Executable heap : Killed Executable stack : Killed Executable shared library bss : Killed Executable shared library data : Killed Executable anonymous mapping (mprotect) : Killed Executable bss (mprotect) : Killed Executable data (mprotect) : Killed Executable heap (mprotect) : Killed Executable stack (mprotect) : Killed Executable shared library bss (mprotect) : Killed Executable shared library data (mprotect): Killed Writable text segments : Killed Anonymous mapping randomisation test : 29 quality bits (guessed) Heap randomisation test (ET_EXEC) : 35 quality bits (guessed) Heap randomisation test (PIE) : 35 quality bits (guessed) Main executable randomisation (ET_EXEC) : 29 quality bits (guessed) Main executable randomisation (PIE) : 29 quality bits (guessed) Shared library randomisation test : 29 quality bits (guessed) VDSO randomisation test : 29 quality bits (guessed) Stack randomisation test (SEGMEXEC) : 35 quality bits (guessed) Stack randomisation test (PAGEEXEC) : 35 quality bits (guessed) Arg/env randomisation test (SEGMEXEC) : 35 quality bits (guessed) Arg/env randomisation test (PAGEEXEC) : 35 quality bits (guessed) Randomization under memory exhaustion @~0: 29 bits (guessed) Randomization under memory exhaustion @0 : 29 bits (guessed) Return to function (strcpy) : paxtest: return address contains a NULL byte. Return to function (memcpy) : *** buffer overflow detected ***: rettofunc2 terminated; report to <http://bugs.gentoo.org/> Killed Return to function (strcpy, PIE) : paxtest: return address contains a NULL byte. Return to function (memcpy, PIE) : *** buffer overflow detected ***: rettofunc2x terminated; report to <http://bugs.gentoo.org/> Killed
paxtest.log-arm
(application/octet-stream, 2.7 KB) - not displayed