Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 17 Sep 2019 00:37:23 +0200
From: Adam Zabrocki <pi3@....com.pl>
To: lkrg-users@...ts.openwall.com
Subject: Re: lkrg-0.7 lkrg.hide=1 causes LOST MODULE

Hi,

Thanks for the report.

On Mon, Sep 16, 2019 at 02:09:19PM +0300, Alexander V. Gusev wrote:
> Hi!
> 
> I am having trouble with sysctl lkrg.hide. lkrg-0.7 is
> compiled from source on Debian 10 (4.19.37-5). I insmod
> p_lkrg.ko, then do:
> 
>   sysctl lrkg.hide=1
> 
> In a few seconds lkrg starts complaining that a module has
> been lost and is missing from module list. Looks like lkrg
> forgot that it's himself that is missing because it just
> did hide itself!
> 
> Perhaps I am missing something or doing something wrong?
> 

Nope, you are doing everything right. I've not put too much attention to this 
functionality. 0.7 re-enabled self-hashing feature but I miss 'hide' path and 
this is the reason of that issue. I will try to address this issue and let you 
know about the patch.

Thanks,
Adam

> dmesg output is as follows:
> 
> [p_lkrg] ALERT !!! FOUND LESS[1] MODULES IN CURRENT SYSTEM IN 
>   MODULE LIST[63] THAN IN DB MODULE LIST[64]
> [p_lkrg] LOST MODULE:
> module at addr[000000002061e0af] module core[000000008fbf4b8b] 
>   with size[0x11000] hash[0xd71b46568b40ba8f]
> [p_lkrg] ** STRANGE BEHAVIOUR DETECTED - MODULE FOUND IN DB BUT 
>   NOT IN OS !! **
>               ** RACE CONDITION MIGHT APPEARED WHEN SYSTEM WAS 
>               REBUILDING DATABASE **
> [p_lkrg] ALERT !!! FOUND LESS[1] MODULES IN CURRENT SYSTEM IN 
> KOBJ[63] THAN IN DB KOBJ[64]
> [p_lkrg] LOST MODULE:
> module at addr[000000002061e0af] module core[000000008fbf4b8b] 
> with size[0x11000] hash[0xd71b46568b40ba8f]
> [p_lkrg] ** STRANGE BEHAVIOUR DETECTED - MODULE FOUND IN DB BUT 
> NOT IN OS !! **
>               ** RACE CONDITION MIGHT APPEARED WHEN SYSTEM WAS 
>               REBUILDING DATABASE **
> [p_lkrg] System is clean!
> 
> Thanks!

-- 
pi3 (pi3ki31ny) - pi3 (at) itsec pl
http://pi3.com.pl

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.