Re: [gentoo-hardened] latest kernel exploit patch for vmsplice coming?

[Alex Howells]

On 10/02/2008, Mike Rellion <m.rellion@×××××.com> wrote:
> With this latest root exploit getting a lot of attention will we get a
> hardened patch for this soon?
>
> There is a runtime fix at:
> http://www.ping.uio.no/~mortehu/disable-vmsplice-if-exploitable.c
> but grsec sadly prevents the runtime fix from running for those of us
> running it as it denies kmem writing.  We could recompile without grsec to
> apply this runtime patch but that is certainly a hack.

I wasn't sure we needed a special patch?

Every single box I've tried this exploit on ranging from
hardened-sources-2.6.17 through to hardened-sources-2.6.23, its been
nailed. Could just be my kernel configuration?
-- 
gentoo-hardened@l.g.o mailing list