[juneau-lug] vmsplice root exploit for linux 2.6.17 - 2.6.24
- From: "Myron Davis" <myrond@xxxxxxxxx>
- To: juneau-lug@xxxxxxxxxxxxx
- Date: Wed, 13 Feb 2008 09:56:47 +1500
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I'm sure everyone has heard about this but I thought I'd send it out
"just in case" you didn't. There is a nasty root exploit for kernel
2.6.17 - 2.6.24 which I highly recommend upgrading your kernel.
Unfortunately not everyone has patches out (well probably now
but...)...
Anyway what I did on my boxes was install a kernel module that
disables vmsplice (if for some reason you can't reboot your box or
can't upgrade your kernel for some reason) I recommend this route. I
tried a couple and this is the best one I've found:
Just download from http://home.powertech.no/oystein/ptpatch2008/ the
Makefile and ptpatch2008.c type make and copy the kernel module into a
directory in your kernel directory type depmod -a, then modprobe
ptpatch2008 and you should be golden.
- -Myron
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: http://firegpg.tuxfamily.org
iD8DBQFHseypifbfg5b2FvURAgGdAKCZAD3uKFeNWcmmOht7VKrMtQX9AwCg5eSV
a1MQyZMSNx7hVroGXJZAkvU=
=fE5L
-----END PGP SIGNATURE-----
------------------------------------
The Juneau Linux Users Group -- http://www.juneau-lug.org
This is the Juneau-LUG mailing list.
To unsubscribe, send an e-mail to juneau-lug-request@xxxxxxxxxxxxx with the
word unsubscribe in the subject header.
Other related posts:
- » [juneau-lug] vmsplice root exploit for linux 2.6.17 - 2.6.24
