hardenedlinux / debian-gnu-linux-profiles Goto Github PK

shawn@debian8-test:~/secureboot$ make
certtool -s --bits=2048 --outfile pk.key
Generating a self signed certificate...
You must specify --load-privkey
Makefile:12: recipe for target 'pk.key' failed
make: *** [pk.key] Error 1

@persmule could you plz fix it?

https://www.debian.org/consultants/#CN

发现在这里，有列出你们这个项目。

Hi all,

I'm probably missing something here but why don't you use paxctld ?
https://packages.debian.org/stretch/admin/paxctld

CONFIG_PAX_XATTR_PAX_FLAGS=y
#CONFIG_PAX_PT_PAX_FLAGS is not set

No more PT_GNU_STACK overwriting, it reads flags from /etc/paxctld.conf and use xattr... in case you might want to update your binaries.

Cheers

The issue:

Unknown enabled syscall when running syz-manager with open$proc.

The reason

It is not getting compiled with the main syz-manager bin during make all

The workaround

Since syzkaller has been updated, heres how I got it to work:

1. make bin/syz-extract
   1.5 the kernel dir you specify needs to be compiled , so that the next step can be done without errors.
2. bin/syz-extract -os linux -arch amd64 -sourcedir /home/rk/kernels/linux-4.19.6 my_test.txt
3. HERE , make generate
4. It may give error in go19.go, ignore.
5. make
6. now it will work with the custom .cfg

Also, the options (-linux) have been deprecated. need to be updated in guide, but the help message spit out by the syzkaller is pretty self-explanantory.
make generate needs to be added ASAP.

Thanks

Hello,

With this settings,All Bro logs will be under Index bro-xxx*,

~/src# cat > /etc/logstash/conf.d/bro-software.conf << EOF 
input {
	kafka {
		topics => ["software"]
		group_id => "bro_logstash"
     		bootstrap_servers => "192.168.1.147:9092"
     		codec => json
     		auto_offset_reset => "earliest"
   	}
}

output {
	elasticsearch {
     		hosts => ["192.168.1.142:9200"]
		index => "bro-software"
		document_type => "software"
   	}
}

From:https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/NSM/docs/ELK_with_bro_ID_doc.mkd#create-new-logstash-configuration

As you can see here,
https://raw.githubusercontent.com/hardenedlinux/Debian-GNU-Linux-Profiles/master/NSM/docs/image/create_pattern_5.png

AA,RA,RD,TC...,should not be here

./bin/syz-extract -os linux -arch arm64 -sourcedir "/xxxx/android/kernel/msm-4.19" -builddir "/xxxx/android/kernel/msm-4.19" proc_operation.txt

generating linux/arm64...
proc_operation.txt:4:51: len can't be syscall return
proc_operation.txt:5:51: len can't be syscall return

how to fix it？