Gentoo Archives: gentoo-hardened

From: Grant <emailgrant@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Hardened laptop: am I nuts?
Date: Wed, 05 Dec 2007 15:19:13
Message-Id: 49bf44f10712050717l2152ee22vc55bd0fb90c09ba4@mail.gmail.com
In Reply to: Re: [gentoo-hardened] Hardened laptop: am I nuts? by pageexec@freemail.hu
1 > > > > execve("/opt/wengophone/qtwengophone", ["./qtwengophone"...], [/* 41
2 > > > > vars */]) = -1 ENOENT (No such file or directory)
3 > > >
4 > > > is /opt/wengophone/qtwengophone present? also, did you enable\
5 > >
6 > > Yeah, very strange:
7 > >
8 > > $ ls -l /opt/wengophone/qtwengophone
9 > > -rwxr-xr-x 1 root root 16000265 Dec 4 14:52 /opt/wengophone/qtwengophone
10 >
11 > and what happens if you execute it directly from the shell? even better,
12 > just strace /opt/wengophone/qtwengophone (though i guess it'll still fail).
13
14 # strace /opt/wengophone/qtwengophone
15 execve("/opt/wengophone/qtwengophone",
16 ["/opt/wengophone/qtwengophone"], [/* 30 vars */]) = -1 ENOENT (No
17 such file or directory)
18 dup(2) = 3
19 fcntl(3, F_GETFL) = 0x8002 (flags O_RDWR|O_LARGEFILE)
20 fstat(3, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 4), ...}) = 0
21 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
22 0) = 0x2b29eb6cf000
23 lseek(3, 0, SEEK_CUR) = -1 ESPIPE (Illegal seek)
24 write(3, "strace: exec: No such file or di"..., 40strace: exec: No
25 such file or directory
26 ) = 40
27 close(3) = 0
28 munmap(0x2b29eb6cf000, 4096) = 0
29 brk(0x555555800000) = 0x555555800000
30 exit_group(1) = ?
31
32 > do you use grsec/RBAC? what happens if you copy say /bin/ls to /opt, can
33 > you execute it?
34
35 I don't know what RBAC is but I'm guessing I would know if I were
36 using it. I don't have grsec or any other "Security options" enabled
37 in the kernel at all.
38
39 Copying /bin/ls to /opt/bin/ls and executing it works perfectly.
40
41 > > > IA32 support in your kernel .config?
42 > >
43 > > I did enable it, but after I had built pretty much the whole system.
44 > > wengo was built afterward though. I have all four options enabled
45 > > under "Executable file formats / Emulations" on
46 > > hardened-sources-2.66-r8.
47 >
48 > can you execute other 32 bit binaries? thing is, all your complaints are
49 > seemingly 32 bit ones (and in /opt), so something's wrong there.
50
51 I don't know of any 32-bit binaries on my system except wengophone,
52 skype, and firefox-bin and they all fail.
53
54 - Grant
55 --
56 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] Hardened laptop: am I nuts? pageexec@××××××××.hu