maemo.org - Talk - View Single Post - [N950] Infodump Thread

	javispedro	2011-08-09 , 23:53
	Posts: 2,355 \| Thanked: 5,249 times \| Joined on Jan 2009 @ Barcelona	#19

Remember to do the echo 0 > enforce part, otherwise Aegis is kept in enforce mode.

Originally Posted by hawaii

Curiously, the only reason this works is because kernel modules don't need signing to be loaded? You simply need a SHA1 hash of the module injected into the loading whitelist?

Yes. In the initial version, I modified restok.conf to give the unknown source all of the privileges I wanted (dac_admin, setuid, setgid, and sys_module). But then I realized develsh already has all of those tokens... so I deduced you could already load modules; only the hashes were missing, but develsh also had the privileges to load those.

Therefore, I used develsh as a replacement for the restok.conf trick.

Quote & Reply |

The Following User Says Thank You to javispedro For This Useful Post:
qole