[grsec] grsec for vmsplice-bug-fixed Linux 2.6?

[Brad Spengler]

On Thu, Feb 14, 2008 at 03:16:01AM +0100, Marc Schiffbauer wrote:
> * Lubomir Host schrieb am 13.02.08 um 22:43 Uhr:
> > I like to use only awk instead of 'cat | grep | awk' combo:
> > 
> >   echo -e '\xc3' | dd of=/dev/kmem bs=1 count=1 seek=$((0x`awk
> >   '/sys_vmsplice/ { print $1; }' /proc/kallsyms`))
> 
> What does this do?

It removes the functionality of the vmsplice system call by overwriting 
the first byte of the function with the 'retn' instruction.

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20080213/b87cdb51/attachment.pgp