News for hackers. Stuff that matters.

A comment on Microsoft finds privilege escalation vulnerability in Huawei driver. Parent comment

Re:Microsoft finds privilege escalation vulnerability in Hua... by rujuladanh on Wednesday April 03, 2019 @08:32PM (#19568396)
A driver allowing to map any page is like recording a magician from all angles.

The only reasonable usage of such a situation is for the magician him/herself, to study his/her own performance. And even then, it is not usually done that way.

[ Parent | on HN ]
Re:Microsoft finds privilege escalation vulnerability in Hua... by monocasa on Wednesday April 03, 2019 @08:37PM (#19568416)
There's a lot of situations where you map in trampolines to perform work inside a process on behalf of that process.
[ Parent | on HN ]
Re:Microsoft finds privilege escalation vulnerability in Hua... by rujuladanh on Thursday April 04, 2019 @09:24AM (#19571973)
The article is about a driver that allows to map any physical page.
[ Parent | on HN ]
Re:Microsoft finds privilege escalation vulnerability in Hua... by monocasa on Thursday April 04, 2019 @02:48PM (#19575767)
That majority isn't.

And while there's better ways to handle it, and it wouldn't pass a design review of mine, it's pretty common to make a driver specific /dev/mem equivalent. For isntance https://forum.xda-developers.com/showthread.php?t=2057818

[ Parent | on HN ]
Re:Microsoft finds privilege escalation vulnerability in Hua... by rujuladanh on Thursday April 04, 2019 @05:19PM (#19577232)
I am not sure what you are trying to say.

Any driver for a multiuser OS that essentially bypasses protection mechanisms by the kernel for non-root users is broken, period.

There is no argument about it.

[ Parent | on HN ]