Re: [gentoo-hardened] latest kernel exploit patch for vmsplice coming?

[Mike Rellion]

Sorry I wasn't saying we needed a special patch but as 2.6.24 is masked
currently I was thinking if hardened could add this as one of the hardened
patches applied to the kernel when compiled.

~Mitch

On Feb 10, 2008 5:32 PM, Alex Howells <astinus@g.o> wrote:

> On 10/02/2008, Mike Rellion <m.rellion@×××××.com> wrote:
> > With this latest root exploit getting a lot of attention will we get a
> > hardened patch for this soon?
> >
> > There is a runtime fix at:
> > http://www.ping.uio.no/~mortehu/disable-vmsplice-if-exploitable.c<http://www.ping.uio.no/%7Emortehu/disable-vmsplice-if-exploitable.c>
> > but grsec sadly prevents the runtime fix from running for those of us
> > running it as it denies kmem writing.  We could recompile without grsec
> to
> > apply this runtime patch but that is certainly a hack.
>
> I wasn't sure we needed a special patch?
>
> Every single box I've tried this exploit on ranging from
> hardened-sources-2.6.17 through to hardened-sources-2.6.23, its been
> nailed. Could just be my kernel configuration?
> --
> gentoo-hardened@l.g.o mailing list
>
>