Gentoo Archives: gentoo-hardened

From: Grant <emailgrant@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Hardened laptop: am I nuts?
Date: Wed, 05 Dec 2007 14:10:42
Message-Id: 49bf44f10712050608t5354a02epd4f560dfeaa5c6ac@mail.gmail.com
In Reply to: Re: [gentoo-hardened] Hardened laptop: am I nuts? by pageexec@freemail.hu
1 > > $ skype
2 > > /usr/bin/skype: line 10: /opt/skype/skype: No such file or directory
3 > > /usr/bin/skype: line 10: /opt/skype/skype: Success
4 > > $ wengophone
5 > > /opt/bin/wengophone: line 10: /opt/wengophone/qtwengophone: No such
6 > > file or directory
7 > > /opt/bin/wengophone: line 10: /opt/wengophone/qtwengophone: Success
8 > > $ firefox-bin
9 > > /usr/libexec/mozilla-launcher: line 368:
10 > > /opt/firefox/mozilla-xremote-client: No such file or directory
11 > > Unknown error 127 from mozilla-xremote-client
12 > > /usr/libexec/mozilla-launcher: line 460: /opt/firefox/firefox-bin: No
13 > > such file or directory
14 > > firefox-bin exited with non-zero status (127)
15 > >
16 > > All of the errors are very similar, and all of the files they say
17 > > don't exist definitely do.
18 >
19 > all of them seem to be in /opt. is that a special mount with noexec
20 > set perhaps? otherwise you could 'strace -f' one of these and check
21 > what exactly fails.
22
23 It's actually a very straightforward install right out of the Gentoo
24 Handbook. sda1, sda2, sda3. No special mount.
25
26 I'm not sure which part is relevant here so I've got to post the whole thing:
27
28 $ strace -f wengophone
29 execve("/opt/bin/wengophone", ["wengophone"], [/* 40 vars */]) = 0
30 brk(0) = 0x555555841828
31 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
32 0) = 0x2b6480229000
33 uname({sys="Linux", node="laptop", ...}) = 0
34 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
35 open("/etc/ld.so.cache", O_RDONLY) = 3
36 fstat(3, {st_mode=S_IFREG|0644, st_size=55848, ...}) = 0
37 mmap(NULL, 55848, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2b648022a000
38 close(3) = 0
39 open("/lib/libncurses.so.5", O_RDONLY) = 3
40 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\16\2\0\0\0\0\0"...,
41 832) = 832
42 fstat(3, {st_mode=S_IFREG|0755, st_size=410208, ...}) = 0
43 mmap(NULL, 2508728, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
44 0) = 0x2b6480238000
45 mprotect(0x2b648028e000, 2093056, PROT_NONE) = 0
46 mmap(0x2b648048d000, 61440, PROT_READ|PROT_WRITE,
47 MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x55000) = 0x2b648048d000
48 mmap(0x2b648049c000, 1976, PROT_READ|PROT_WRITE,
49 MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2b648049c000
50 close(3) = 0
51 open("/lib/libdl.so.2", O_RDONLY) = 3
52 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\16\0\0\0\0\0\0"...,
53 832) = 832
54 fstat(3, {st_mode=S_IFREG|0755, st_size=14328, ...}) = 0
55 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
56 0) = 0x2b648049d000
57 mmap(NULL, 2109600, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
58 0) = 0x2b648049e000
59 mprotect(0x2b64804a0000, 2097152, PROT_NONE) = 0
60 mmap(0x2b64806a0000, 8192, PROT_READ|PROT_WRITE,
61 MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x2b64806a0000
62 close(3) = 0
63 open("/lib/libc.so.6", O_RDONLY) = 3
64 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\334\1\0\0\0\0\0"...,
65 832) = 832
66 fstat(3, {st_mode=S_IFREG|0755, st_size=1301512, ...}) = 0
67 mmap(NULL, 3409464, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
68 0) = 0x2b64806a2000
69 mprotect(0x2b64807d9000, 2097152, PROT_NONE) = 0
70 mmap(0x2b64809d9000, 20480, PROT_READ|PROT_WRITE,
71 MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x137000) = 0x2b64809d9000
72 mmap(0x2b64809de000, 17976, PROT_READ|PROT_WRITE,
73 MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2b64809de000
74 close(3) = 0
75 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
76 0) = 0x2b64809e3000
77 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
78 0) = 0x2b64809e4000
79 arch_prctl(ARCH_SET_FS, 0x2b64809e3b00) = 0
80 open("/dev/urandom", O_RDONLY) = 3
81 read(3, "\243R\17\276\252Y\\\353", 8) = 8
82 close(3) = 0
83 mprotect(0x2b64809d9000, 16384, PROT_READ) = 0
84 mprotect(0x2b64806a0000, 4096, PROT_READ) = 0
85 mprotect(0x2b648048d000, 57344, PROT_READ) = 0
86 mprotect(0x555555830000, 8192, PROT_READ) = 0
87 mprotect(0x2b6480227000, 4096, PROT_READ) = 0
88 munmap(0x2b648022a000, 55848) = 0
89 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
90 open("/dev/tty", O_RDWR|O_NONBLOCK) = 3
91 close(3) = 0
92 brk(0) = 0x555555841828
93 brk(0x555555862828) = 0x555555862828
94 brk(0x555555863000) = 0x555555863000
95 getuid() = 1000
96 getgid() = 1000
97 geteuid() = 1000
98 getegid() = 1000
99 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
100 open("/proc/meminfo", O_RDONLY) = 3
101 fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
102 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
103 0) = 0x2b648022a000
104 read(3, "MemTotal: 1017872 kB\nMemFre"..., 1024) = 725
105 close(3) = 0
106 munmap(0x2b648022a000, 4096) = 0
107 brk(0x555555862000) = 0x555555862000
108 rt_sigaction(SIGCHLD, {SIG_DFL}, {SIG_DFL}, 8) = 0
109 rt_sigaction(SIGCHLD, {SIG_DFL}, {SIG_DFL}, 8) = 0
110 rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0
111 rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0
112 rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_DFL}, 8) = 0
113 rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_DFL}, 8) = 0
114 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
115 rt_sigaction(SIGQUIT, {SIG_IGN}, {SIG_DFL}, 8) = 0
116 uname({sys="Linux", node="laptop", ...}) = 0
117 stat("/home/grant", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
118 stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
119 getpid() = 11593
120 getppid() = 11592
121 getpgrp() = 11592
122 rt_sigaction(SIGCHLD, {0x5555555a117f, [], SA_RESTORER,
123 0x2b64806d25f0}, {SIG_DFL}, 8) = 0
124 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
125 open("/opt/bin/wengophone", O_RDONLY) = 3
126 ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x7fff2aa9bf00) = -1 ENOTTY
127 (Inappropriate ioctl for device)
128 lseek(3, 0, SEEK_CUR) = 0
129 read(3, "#!/bin/sh\ncd \"/opt/wengophone\"\ni"..., 80) = 80
130 lseek(3, 0, SEEK_SET) = 0
131 getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0
132 dup2(3, 255) = 255
133 close(3) = 0
134 fcntl(255, F_SETFD, FD_CLOEXEC) = 0
135 fcntl(255, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
136 fstat(255, {st_mode=S_IFREG|0755, st_size=257, ...}) = 0
137 lseek(255, 0, SEEK_CUR) = 0
138 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
139 read(255, "#!/bin/sh\ncd \"/opt/wengophone\"\ni"..., 257) = 257
140 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
141 stat("/opt", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
142 stat("/opt/wengophone", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
143 chdir("/opt/wengophone") = 0
144 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
145 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
146 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
147 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
148 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
149 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
150 rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0
151 rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_IGN}, 8) = 0
152 rt_sigaction(SIGCHLD, {SIG_DFL}, {0x5555555a117f, [], SA_RESTORER,
153 0x2b64806d25f0}, 8) = 0
154 execve("/opt/wengophone/qtwengophone", ["./qtwengophone"...], [/* 41
155 vars */]) = -1 ENOENT (No such file or directory)
156 stat("/opt/wengophone/qtwengophone", {st_mode=S_IFREG|0755,
157 st_size=16000265, ...}) = 0
158 stat("/opt/wengophone/qtwengophone", {st_mode=S_IFREG|0755,
159 st_size=16000265, ...}) = 0
160 open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 3
161 read(3, "65536\n", 31) = 6
162 close(3) = 0
163 mmap(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS,
164 -1, 0) = 0x2b64809e5000
165 getgroups(65536, [10, 18, 19, 27, 85, 100, 250, 1000]) = 8
166 open("/opt/wengophone/qtwengophone", O_RDONLY) = 3
167 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\2\0\3\0\1\0\0\0pKV\0104\0\0\0"...,
168 80) = 80
169 close(3) = 0
170 fstat(2, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 4), ...}) = 0
171 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
172 0) = 0x2b6480a26000
173 write(2, "/opt/bin/wengophone: line 10: /o"..., 86/opt/bin/wengophone:
174 line 10: /opt/wengophone/qtwengophone: No such file or directory
175 ) = 86
176 stat("/opt/wengophone/qtwengophone", {st_mode=S_IFREG|0755,
177 st_size=16000265, ...}) = 0
178 write(2, "/opt/bin/wengophone: line 10: /o"..., 68/opt/bin/wengophone:
179 line 10: /opt/wengophone/qtwengophone: Success
180 ) = 68
181 exit_group(1)
182
183 - Grant
184 --
185 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] Hardened laptop: am I nuts? pageexec@××××××××.hu