CONFIG_CRYPTO_USER_API_AEAD=yBut that doesn’t mean we are immune to this kind of attack since non-GKI kernels exist.
We still gotta block the necessary syscalls needed for this kind of attack using seccomp for the greater good.
Post #338
715
Droidspaces Can anyone try the recently discovered "Copy Fail" vulnerability on Droidspaces? https://github.com/tgies/copy-fail-c/releases/tag/v0.2.0 Looks like I don't have a supported kernel. What is expected is gaining root access inside the container or total container…
It seems like Google saved all ya all asses by turning off the core Android kernel configuration necessary for this vulnerability:
But that doesn’t mean we are immune to this kind of attack since non-GKI kernels exist.
We still gotta block the necessary syscalls needed for this kind of attack using seccomp for the greater good.
But that doesn’t mean we are immune to this kind of attack since non-GKI kernels exist.
We still gotta block the necessary syscalls needed for this kind of attack using seccomp for the greater good.
- ❤ 3
- 💩 1