Hacker Read top | best | new | newcomments | leaders | about | bookmarklet login

“I tried running your executable with all syscalls blocked and it didn’t work please fix”


sort by: page size:

On the bright side, syscalls have manpages that accurately describe their errors. In this case, "man 2 execve" says:

> ENOENT The file pathname or a script or ELF interpreter does not exist.


> All I can see in the terminal is a message about pthread_setschedparam failing,

Just spotted this on Cuis smalltalk github page:

"If you get this error message (you won't get it if you run Cuis as root or sudo):

pthread_setschedparam failed: Operation not permitted ...

Then you need to do this (just one time):

sudo cp Cuis-Smalltalk-Dev/squeak.conf /etc/security/limits.d/squeak.conf

Log out and log back in, or reboot the machine."

Might be something similar for pharo?

https://github.com/Cuis-Smalltalk/Cuis-Smalltalk-Dev/blob/ma...


> To allow it to process the rm command, I had to make a copy of the executable into a temporary directory and execute that.

To be clear this is due to SIP.


Something is terribly wrong with your setup if command line completion is not working.

ldd is always on assistance to see why executable file can't be loaded.

> ...circumvent the signature of the InRelease file, leading to arbitrary code execution.

> For the stable distribution (jessie), this problem has been fixed in version 1.0.9.8.4.

> For the unstable distribution (sid), this problem has been fixed in version 1.4~beta2.

> We recommend that you upgrade your apt packages.

Good find, Project Zero!


From that page:

> "Everyone who's seeing this error on their system is running a package of the Linux kernel on their distribution that's far too old and lacks the fixes for this particular problem."


"We got local file inclusion but cannot read /etc/passwd. No idea what went wrong..."

Just to be sure, I don't think that's enough. You might want to kill the running process and remove the binary (as described under "Quick Fix" section in the blog post)

> Perhaps you download a shim installer that tests your processor and chooses the correct download?

Wouldn't that only work if the shim itself was a universal/fat binary? Otherwise you still run into the same problem. You can sort of work around on unix-like systems by using the shebang, and on windows by having the executable in .net.


Posted this query error /a.out: /lib64/libstdc++.so.6: version `CXXABI_1.3.9' not found

and got blocked. LOL


Why not, what’s the error, and how did you set it up? Any chance you tried it in a nix shell or nix vm or other isolated environment?

"It left a bunch of crap on my computer too, starting up some kind of server on startup."

That "crap somekind of server" would be MySQL server. Were you trying to install MySQL client instead.

I've never had a problem. `apt-get install mysq-server`and I'm done.


> It didn't like my BSD find options.

Which options, specifically?


You won’t be stuck, you just need to add some command line flags when running your application, as a way of acknowledging these packages are breaking encapsulation.

If you ran Linux executables you torrented you'd have the exact same problem.

> or require adding unsupported 3rd party software

Not just unsupported, I think you need a kernel extension?


> just have the native version installed on the target OS

this is literally the problem


Can’t bring in new executable code.
next

Legal | privacy