| mkdir /tmp/mount | |
| mount -o nolock -t nfs 192.168.2.1:/Users/mcs/kindle/lol /tmp/mount | |
| mount -o bind /dev /tmp/mount/dev | |
| mount -o bind /sys /tmp/mount/sys | |
| mount -o bind /dev/pts /tmp/mount/dev/pts | |
| mount -o bind /dev/shm /tmp/mount/dev/shm | |
| mount -o bind /proc /tmp/mount/proc | |
| mount -o bind /tmp /tmp/mount/tmp | |
| mount -o bind /mnt/us /tmp/mount/mnt/us | |
| mount -o bind / /tmp/mount/kindle-root | |
| cd /tmp/mount | |
| chroot . /bin/bash |
|
[root@kindle mount]# strace ping 8.8.8.8 |
sechrist commentedJul 4, 2010
execve("/bin/ping", ["ping", "8.8.8.8"], [/* 18 vars */]) = 0
brk(0) = 0x2d000
fcntl64(0, F_GETFD) = 0
fcntl64(1, F_GETFD) = 0
fcntl64(2, F_GETFD) = 0
access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory)
uname({sys="Linux", node="kindle", ...}) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4001c000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=7987, ...}) = 0
mmap2(NULL, 7987, PROT_READ, MAP_PRIVATE, 3, 0) = 0x4001d000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/libresolv.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0D$\0\000"..., 512) = 512
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4001f000
fstat64(3, {st_mode=S_IFREG|0644, st_size=67424, ...}) = 0
mmap2(NULL, 108444, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40025000
mprotect(0x40035000, 28672, PROT_NONE) = 0
mmap2(0x4003c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf) = 0x4003c000
mmap2(0x4003e000, 6044, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4003e000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/libgcc_s.so.1", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0`&\0\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=42620, ...}) = 0
mmap2(NULL, 74004, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40040000
mprotect(0x4004a000, 28672, PROT_NONE) = 0
mmap2(0x40051000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9) = 0x40051000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\240U\1\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1193668, ...}) = 0
mmap2(NULL, 1230084, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40053000
mprotect(0x40172000, 32768, PROT_NONE) = 0
mmap2(0x4017a000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x11f) = 0x4017a000
mmap2(0x4017d000, 9476, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4017d000
close(3) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40020000
syscall_983045(0x400201a0, 0x40020877, 0x40020878, 0x400201a0, 0x40024000, 0x40024048, 0x40024048, 0xf0005, 0x40, 0, 0x2, 0xbec6eab4, 0, 0xbec6e9a8, 0x40011178, 0x40001f9c, 0x20000010, 0x400201a0, 0xc4bc, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0) = 0
open("/dev/urandom", O_RDONLY) = 3
read(3, "\350/\2", 3) = 3
close(3) = 0
mprotect(0x4017a000, 8192, PROT_READ) = 0
mprotect(0x40051000, 4096, PROT_READ) = 0
mprotect(0x4003c000, 4096, PROT_READ) = 0
mprotect(0x18000, 4096, PROT_READ) = 0
mprotect(0x40023000, 4096, PROT_READ) = 0
munmap(0x4001d000, 7987) = 0
mq_notify(2, ptrace: umoven: Input/output error
{...}) = -1 EPERM (Operation not permitted)
getuid32() = 0
setuid32(0) = 0
mq_notify(2, ptrace: umoven: Input/output error
{...}) = 3
SYS_283(0x3, 0xbec6ec14, 0x10, 0, 0x2a2bc) = 0
SYS_286(0x3, 0x2a2cc, 0xbec6ec34, 0x10, 0x2a2bc) = 0
close(3) = 0
dup(2) = 3
fcntl64(3, F_GETFL) = 0x2 (flags O_RDWR)
brk(0) = 0x2d000
brk(0x4e000) = 0x4e000
fstat64(3, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4001d000
_llseek(3, 0, 0xbec6ea28, SEEK_CUR) = -1 ESPIPE (Illegal seek)
write(3, "ping: icmp open socket: Operatio"..., 48ping: icmp open socket: Operation not permitted
) = 48
close(3) = 0
munmap(0x4001d000, 4096) = 0
io_submit(0x2, 0x95998, 0x8 <unfinished ... exit status 2>
Process 4047 detached