Re:Big problems with ASLR in Ice Cream Sandwich
by jonoberheide on Friday February 17, 2012 @03:36PM
(#3604873)
GRKERNSEC_BRUTE will also trigger for suid binaries (in the case of memprodroid, run-as). See gr_handle_brute_attach() for details.
[ Parent
| on HN ]
Re:Big problems with ASLR in Ice Cream Sandwich
by saurik on Friday February 17, 2012 @03:57PM
(#3604942)
Ah, (for anyone caring enough to read this discussion) apparently the actual code in the patch (which was more complex than listed here [1]) doesn't just ban processes (as with control of the parent we really do have the ability to bypass the process check, as again: we can just keep making replacement exploit containers), but also bans entire user accounts that are causing suspicious memory accesses.
[1] http://xorl.wordpress.com/2010/11/09/grkernsec_brute-exploit...