kernel patching

erikm103 · 03-19-2003, 02:10 AM

I recently heard of this ptrace hole in 2.4.*

I run 2.4.18 and I was told that my box was vuln by a good friend, and he actually proved it to me aswell

hehe, anyhow I see there is a patch for it, however I have no clue how to go about patching this problem.

Could someone start me in the right direction?

Thanks,

Erik

Palin · 03-19-2003, 11:13 AM

If you are refering to the vulnerablity reported by alan cox, I read the email and it says it is a local vulnerability only so it depends on your local security of your PC as to whether or not this patch is essential.

I believe you run the patch on the kernel source then recompile the kernel. You could also check the mandrake site to see if they have a patched kernel available as of yet.

UnTamed · 03-19-2003, 12:12 PM

This is generally speaking, look around where you got the patch for any specifics.
Make sure you have your sources installed.
Decompress the patch in /usr/src.
Get into your sources dir, cd /usr/src/linux-<version> [...or preferably /usr/src/linux, where linux is a symlink to linux-<version>].
Apply the patch, patch -p1 < ../<patch-name>.patch.
Recompile and install the new kernel.