Reputation
1,497
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 10 27
Newest
 Enlightened
Impact
~63k people reached

  • 0 posts edited
  • 0 helpful flags
  • 134 votes cast
Jan
25
awarded  Enlightened
Jan
25
awarded  Nice Answer
Jan
22
comment exists a “two-factor authentication” for sudo, if not how to make one anyway?
@alanc you opened my eyes more. I thought only the infamous xinput test $(keyboardnum) allowing to sniff within a Xorg session was problem. But as you helped me see, it is sadly not only Xorg that has a challange, as with the classic user model (classic = time without malware?) one could use strace -p $pidOfattackedOtherTtyProcess or cat /proc/$pid/$filenameForPrivateInfo and attack/sniff user input also on ttys. And I fooled myself thinking thought linux highlights security, stupid me
Jan
20
revised Can the kernel symbols' addresses be influenced? consequences?
corrected the question tittle, kernel symbols meant, system calls are simply a subset of those
Jan
20
comment Can the kernel symbols' addresses be influenced? consequences?
Oh! So what you say is that the complete .text section is randomly placed in memory, but the single symbols are still not suffled, true? That is what you mean by knowing base address. Basically ASLR has the granularity of the .text position in memory?
Jan
20
accepted Can the kernel symbols' addresses be influenced? consequences?
Jan
20
comment Can the kernel symbols' addresses be influenced? consequences?
yes indeed it seems that 12.04 x86 have all the same fixed addresses but an 3.08 kernel not affected (at least I failed at running the test successfully). Sadly there is also 12.04.5 LTS which has different addresses and which I think is vulnerable to the keyctl overflow bug. With the Space Layout Randomization, your answer mentions I wonder how the vulnerability mentioned in the question can exploit the use after free of the kernel, as the space layout is so random?
Jan
20
asked Can the kernel symbols' addresses be influenced? consequences?
Jan
15
comment exists a “two-factor authentication” for sudo, if not how to make one anyway?
@EightBitTony yes that would be somewhat of a response to my question. If I had a wish I would like to use a mere usb dongle (like a flash drive) and a second factor that is less dependent on a second party (especially business stuff like commercial .... no google). If I come as to write a udev based way to add this two-factor via a flash drive. I will post the info as an answer to question myself.
Jan
15
revised exists a “two-factor authentication” for sudo, if not how to make one anyway?
adjusted phrasing in title to be less stupid ;)
Jan
15
comment exists a “two-factor authentication” for sudo, if not how to make one anyway?
@Torxed seems interesting, as at least on the yubiley promo website they mention "our free open source software". Since its a dedicated hardware and I take it that the 40$ price buys me some intergration into sudo that goes beyond what I have suggested. Have to find out if it is a using kernel modules. Anyway my question was not as much about hardware availability, but the way to setup the /etc/sudoers config file for two factor authentication
Jan
15
asked exists a “two-factor authentication” for sudo, if not how to make one anyway?
Nov
13
comment Prevent lockups from badly behaving browser tab?
Did you have a system/kernel/process mgmt solution, or a iceweasel or both in mind "any way", you say? With an extension like noscript you might have blocked initial javascript/active content which I guess to be a likely suspect
Nov
13
accepted Where to put modules for different configurations of same kernel version?
Nov
12
comment In Linux device tree syntax, what happens when duplicate labels appear?
@Kira Indeed I took your comment and added an example. Also by generating the example I was able to find out the answer myself using the example. Maybe somebody will yet be able to complement , enhance the issue (quesiton/answer) by a reference to a docu on the syntax. The reference to the rule "labels need to be unique"
Nov
12
revised In Linux device tree syntax, what happens when duplicate labels appear?
example added
Nov
12
answered In Linux device tree syntax, what happens when duplicate labels appear?
Nov
12
asked In Linux device tree syntax, what happens when duplicate labels appear?
Nov
12
asked Where to put modules for different configurations of same kernel version?
Oct
28
comment How can the xkb layout settings be simplified?
@don_crissti Maybe that is the way to go, yet it feels like the various places of information you direct to somehow do confirm the very point of the question, which is that the layout settings are complicated (several places to look), and it leaves me wonder and suspicious that this is indeed necessary.