Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 20 Jul 2020 14:33:59 +0200
From: Solar Designer <solar@...nwall.com>
To: lkrg-users@...ts.openwall.com
Subject: Re: kernel: BUG: unable to handle page fault for address: ffffffffab42fee7

On Mon, Jul 20, 2020 at 02:10:23PM +0200, Mikhail Morfikov wrote:
> On 20/07/2020 13.20, Solar Designer wrote:
> > 
> > Oh, I think I understand now.  LKRG checks its known UMH program
> > pathnames at its initialization time and then only allows those that
> > were actually found on the system.  Since you don't have
> > /sbin/bridge-stp, LKRG doesn't allow it.  Then it also fails on trying
> > to block its execution because of CPA.
> > 
> > As a temporary workaround, you can try creating /sbin/bridge-stp as a
> > copy of /bin/false.
> 
> It looks like this doesn't help much:
> 
> # cp /bin/false /sbin/bridge-stp
> # ls -al /sbin/bridge-stp
> -rwxr-xr-x 1 root root 35584 2020-07-20 14:02:00 /sbin/bridge-stp*

You need to restart LKRG after this step (rmmod, modprobe) for it to
detect the presence of /sbin/bridge-stp.

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.