Post by @slowservers@bsd.cafe
New local kernel exploit for #OpenBSD called #bigfish gets attackers root with KARL/SMAP/SMEP enabled, with building blocks in the chain going back ~37 years to the original BSD sources:
https://calif.io/research/big-fish
It also has really cool ANSI art. đŸ˜‰
@rqm Pretty impressive!
I am looking forward to getting this patched on all of my servers, but for my hosts I am hoping for 8.0 as it resolves some issues for me.
I do have direct SSH access on hosts, but it's under a very restricted shell and I'm not sure you can spin up enough processes to pull it off.
```
vmuser:\
:umask=022:\
:datasize=16M:\
:coredumpsize=1024:\
:openfiles=20:\
:maxproc=10:\
:tc=auth-defaults:
```