News for hackers. Stuff that matters.

A comment on Linux af_packet.c race condition local root exploit. Parent comment

Re:Linux af_packet.c race condition local root exploit by IshKebab on Tuesday December 06, 2016 @06:51AM (#13113914)
Normal android apps don't have permission to send raw packets.
[ Parent | on HN ]
Re:Linux af_packet.c race condition local root exploit by mschuster91 on Tuesday December 06, 2016 @07:53AM (#13114213)
To quote the mail:

> On Android, processes with gid=3004/AID_NET_RAW are able to create AF_PACKET sockets (mediaserver) and can trigger the bug.

I believe that this is the Android permission android.permission.NET_ADMIN, so it should work in theory...

[ Parent | on HN ]
Re:Linux af_packet.c race condition local root exploit by IshKebab on Tuesday December 06, 2016 @04:42PM (#13118584)
I don't know what permission it is, but I know that there is no permission that Play Store apps can have that allows sending raw packets. There's an open bug about it on the AOSP bug tracker.

System apps can obviously do it - hence the "(mediaserver)" comment.

[ Parent | on HN ]