Исходное сообщение
"Уязвимость в гипервизоре VMM, развиваемом проектом OpenBSD" Отправлено Аноним, 18-Фев-20 09:58
https://security.stackexchange.com/questions/139238/why-does... kern.wxabort=1 # grep kern.wxabort /etc/sysctl.conf kern.wxabort=1 # and rebooted, then ran the paxtest: # ./paxtest blackhat                                                                                                                                         PaXtest - Copyright(c) 2003-2016 by Peter Busser <peter@adamantix.org> and Brad Spengler <spender@grsecurity.net> Released under the GNU Public Licence version 2 or later Writing output to /root/paxtest.log It may take a while for the tests to complete Test results: gcc: no input files Executable anonymous mapping             : Killed Executable bss                           : Killed Executable data                          : Killed Executable heap                          : Killed Executable stack                         : Killed Executable anonymous mapping (mprotect)  : Vulnerable Executable bss (mprotect)                : Vulnerable Executable data (mprotect)               : Vulnerable Executable heap (mprotect)               : Vulnerable Executable shared library bss (mprotect) : Vulnerable Executable shared library data (mprotect): Vulnerable Executable stack (mprotect)              : Killed Anonymous mapping randomization test     : 33 quality bits (guessed) Heap randomization test (ET_EXEC)        : 38 quality bits (guessed) Main executable randomization (ET_EXEC)  : 25 quality bits (guessed) Shared library randomization test        : 33 quality bits (guessed) Stack randomization test (SEGMEXEC)      : 20 quality bits (guessed) Stack randomization test (PAGEEXEC)      : 20 quality bits (guessed) Arg/env randomization test (SEGMEXEC)    : 20 quality bits (guessed) Arg/env randomization test (PAGEEXEC)    : 20 quality bits (guessed) Return to function (strcpy)              : paxtest: return address contains a NULL byte. Return to function (strcpy, PIE)         : paxtest: return address contains a NULL byte. Return to function (memcpy)              : Vulnerable Return to function (memcpy, PIE)         : Vulnerable Executable shared library bss            : Killed Executable shared library data           : Killed Writable text segments                   : Killed # pwd /root/paxtest-0.9.15-bsdfix # # uname -mrs OpenBSD 6.0 amd64 #

Ваше сообщение
Имя*:
EMail:	Для отправки ответов на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	> https://security.stackexchange.com/questions/139238/why-does-paxtest-show-openbsd-as-vulnerable > kern.wxabort=1 > # grep kern.wxabort /etc/sysctl.conf > kern.wxabort=1 > # > and rebooted, then ran the paxtest: > # ./paxtest blackhat > PaXtest - Copyright(c) 2003-2016 by Peter Busser <peter@adamantix.org> and Brad Spengler > <spender@grsecurity.net> > Released under the GNU Public Licence version 2 or later > Writing output to /root/paxtest.log > It may take a while for the tests to complete > Test results: > gcc: no input files > Executable anonymous mapping > : Killed > Executable bss > > : Killed > Executable data > > : Killed > Executable heap > > : Killed > Executable stack > > : Killed > Executable anonymous mapping (mprotect) : Vulnerable > Executable bss (mprotect) > : Vulnerable > Executable data (mprotect) > : Vulnerable > Executable heap (mprotect) > : Vulnerable > Executable shared library bss (mprotect) : Vulnerable > Executable shared library data (mprotect): Vulnerable > Executable stack (mprotect) > : Killed > Anonymous mapping randomization test : 33 quality bits > (guessed) > Heap randomization test (ET_EXEC) : > 38 quality bits (guessed) > Main executable randomization (ET_EXEC) : 25 quality bits (guessed) > Shared library randomization test : > 33 quality bits (guessed) > Stack randomization test (SEGMEXEC) : 20 quality > bits (guessed) > Stack randomization test (PAGEEXEC) : 20 quality > bits (guessed) > Arg/env randomization test (SEGMEXEC) : 20 quality bits (guessed) > Arg/env randomization test (PAGEEXEC) : 20 quality bits (guessed) > Return to function (strcpy) > : paxtest: return address contains a > NULL byte. > Return to function (strcpy, PIE) > : paxtest: return address contains a NULL byte. > Return to function (memcpy) > : Vulnerable > Return to function (memcpy, PIE) > : Vulnerable > Executable shared library bss > : Killed > Executable shared library data > : Killed > Writable text segments > : Killed > # pwd > /root/paxtest-0.9.15-bsdfix > # > # uname -mrs > OpenBSD 6.0 amd64 > #
	Введите код, изображенный на картинке: