-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 During last year's HoneyNet Forensic Challenge, I came across an oddity that I'd forgotten about until just recently... Copies of the subject disk images were mounted (ro,loop,nodev,noexec) such that the original filesystem structure was maintained. $CRACKED_BOX/home/ftp appears to be a chroot jail (can you confirm Lance?) containing bin, etc, lib and pub directories. Navigating into bin, etc and pub followed by an `ls -l` each works fine. However, in lib, `ls -l` and `stat *` both fail with a segfault. Omitting the -l option for ls does list the files. debugfs (ls -l) has no problem with the directory. This behavior struck me as odd, but I was at a loss to explain it. I haven't attempted to recreate this (as mentioned, I'd forgotten about it :) but I was wondering: Has anyone seen this before? Any idea on the cause and how to work around it? -- Brian - -- "We choose to go to the moon, and do the other things... Not because they are easy, but because they are hard." -JFK -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE8TNqkER3MuHUncBsRAnkuAJ9DLoU029n8d7ABC51SfMRFDOM7OwCfdTAS 8gRQmgCOXddK2A3/QnVNf6c= =O2e4 -----END PGP SIGNATURE----- ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Tue Jan 22 2002 - 10:28:34 PST