Anybody want to talk about Dirty Cow? Post: 302984409

Sponsored Content

The Lounge What is on Your Mind? Anybody want to talk about Dirty Cow? Post 302984409 by wisecracker on Tuesday 25th of October 2016 03:49:40 PM

10-25-2016

Registered User

The thing is that according to RedHat the attacker has to be a local user, which implies that you know the local user, with unprivileged access. It does not say whether that user is allowed to execute code loaded from an external source, e.g. USB memory stick...
As I am not a professional I must assume that standard users are NOT allowed only admin' staff.

CVE-2016-5195 - Red Hat Customer Portal

However, and to me this is a big however, the Rowhammer _bug_ is much more serious as it can be buried inside a """free""" app' that could be DLed from so-called reputable sources and be stealthily called or installed inside what looks like a _cool_ app'. NASTY!

As we all know race conditions occur all the time in both HW and/or SW.
I had the condition(s) on both the AMIGA1200 and PC parallel ports when accessing HW I built many years ago so I am aware of situations like this. Obviously these were not OS crippling events but they taught me a lot and to research more about the situation.

Current technology is frighteningly quick compared to those units of yesteryear so even nanoseconds can be the breakpoint of today's HW...

I can't find any test code for Rowhammer though to see how it works... ;o(

...But I could guess though and probably be close enough without any said test code.

wisecracker

View Public Profile for wisecracker

Find all posts by wisecracker

7 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Quick-and-dirty g++ compilation

I am creating a small bash file that will take one argument and compile it: #!/bin/bash OUT=${$1%.cpp} # C++ source files always end in .cpp g++ -Wall $1 -o $OUT chmod 777 $OUT The error message says 'bad substitution', namely where OUT is defined. How to fix this?

2. AIX

Can't mount showing 0506-342 The superblock on /dev/fslv00 is dirty

Dear All Last day in Aix 5.2 server by executing # df –g I found following: Filesystem GB blocks Free %Used Iused %Iused Mounted on . . /dev/fslv00 58.00 136.70 -135% 212103 1% /sprod After shutting down by following command # shutdown –h And when...

3. UNIX for Advanced & Expert Users

Finding volumes with mirrored DRL(Dirty Region Log)

hi, How do I find VxVM volumes which have a mirrored DRL. thanks in advance Prasi

4. Shell Programming and Scripting

noob question - is awk the tool to clean dirty text files?

Hi, nevermind. I think I've found the answer. It appears I was looking for index, match, sub, and gsub. I want to write a shell script that will clean the html out of a bunch of files and format the data for import into excel. Awk seems like a powerful tool, but it seems oriented to...

5. Shell Programming and Scripting

Need a quick and dirty solution

I have a list of multiple versions of software. The list is formated as follows: NAME VERSION I simply need to pull out the highest version of each software, for example: Original File a v1.0 a v1.1 a v1.2 b v2.1 b v2.2 b v2.21 b v3.0 Output a v1.2 b v3.0

6. UNIX for Advanced & Expert Users

Superblock marked dirty

Good morning! I met a problem on a FS with AIX 5.3 It's not possible to mount the FS because of a dirty superblock. I tried few things without success. I need your help to solve my problem guys. Do you have any idea please? Thanks a lot drp01,/home/root # mount /GSPRES/data Replaying...

7. Linux

Broadcom under Fedora 18 (Spherical Cow)

So I'm having a problem getting a Broadcom BCM4312 wireless controller to work under the broadcom-wl module $uname Linux 3.8.11-200.fc18.x86_64 #1 SMP Wed May 1 19:44:27 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux lspci -v 05:00.0 Network controller: Broadcom Corporation BCM4312 802.11b/g...

LEARN ABOUT CENTOS

redhat-upgrade-tool

REDHAT-UPGRADE-TOOL(8)					  redhat-upgrade-tool User Manual				    REDHAT-UPGRADE-TOOL(8)

NAME

       redhat-upgrade-tool - Red Hat Upgrade tool

SYNOPSIS

       redhat-upgrade-tool [OPTIONS] SOURCE

DESCRIPTION

       redhat-upgrade-tool is the Red Hat Upgrade tool.

       The redhat-upgrade-tool client runs on the system to be upgraded. It determines what packages are needed for upgrade and gathers them from
       the source(s) given. It also fetches and sets up the boot images needed to run the upgrade and sets up the system to perform the upgrade at
       next boot.

       The actual upgrade takes place when the system is rebooted, using the boot images set up by redhat-upgrade-tool. The upgrade initrd starts
       the existing system (mostly) as normal, lets it mount all the local filesystems, then starts the upgrade.

       When the upgrade finishes, it reboots the system into the newly-upgraded OS.

OPTIONS

   Optional arguments
       -h, --help
	   Show a help message and exit.

       -v, --verbose
	   Print more info.

       -d, --debug
	   Print lots of debugging info.

       --debuglog DEBUGLOG
	   Write debugging output to the given file. Defaults to /var/log/redhat-upgrade-tool.log.

       --reboot
	   Automatically reboot to start the upgrade when ready.

   SOURCE
       These options tell redhat-upgrade-tool where to look for the packages and boot images needed to run the upgrade. At least one of these
       options is required.

       --device [DEV]
	   Device or mountpoint of mounted install media. If DEV is omitted, redhat-upgrade-tool will scan all currently-mounted removable devices
	   (USB disks, optical media, etc.)

       --iso ISO
	   Installation image file.

       --network VERSION
	   Online repos matching VERSION (a number or "rawhide")

       Multiple sources may be used, if desired.

   Additional options for --network
       --enablerepo REPOID
	   Enable one or more repos (wildcards allowed).

       --disablerepo REPOID
	   Disable one or more repos (wildcards allowed).

       --addrepo REPOID=[@]URL
	   Add the repo at URL. Prefix URL with @ to indicate that the URL is a mirrorlist.

       --instrepo REPOID
	   Get upgrader boot images from the repo named REPOID. The repo must contain a valid .treeinfo file which points to the location of
	   usable kernel and upgrade images.

   Cleanup commands
       --resetbootloader
	   Remove any modifications made to bootloader configuration.

       --clean
	   Clean up everything written by redhat-upgrade-tool.

EXAMPLES

       redhat-upgrade-tool --network 7.0 --instrepo <repo URL>

       Upgrade to RHEL 7.0 by downloading all needed packages and data from the specified repository.

       redhat-upgrade-tool --device --network 7.0

       Upgrade to RHEL 7.0 using install media mounted somewhere on the system, fetching updates from the network if needed.

EXIT STATUS

       0
	   Success.

       1
	   Cancelled by user, failure writing files to disk, or other unknown error

       2
	   Failed to download/copy files from the given SOURCE

       3
	   RPM upgrade transaction test failed

BUGS

       The --iso image must be on a filesystem listed in /etc/fstab.

AUTHORS

       Will Woods <wwoods@redhat.com>

redhat-upgrade-tool						    11/08/2013						    REDHAT-UPGRADE-TOOL(8)