Kernel Hacker Wants to Crack Android Code
Czech kernel developer Pavel Machek wants to be root on his T-Mobile G1 Android Linux mobile phone so that he can exploit security holes simply to extend usability of the phone.
Machek registered his complaint about getting root privilege on his Android phone on the Bugtraq list and Android chat, but concluded that the G1 security system was not so much designed "to protect the owner from an evil attacker" as that it simply "prevents the owner from using his phone." He, for example, wanted to use his G1 to connect his notebook to the Internet.
Machek tried to exploit a dnotify hole fixed by Kernel 2.6.25.1, but found that dnotify was turned off in the G1 kernel. He then tried to use an inotify security hole on his Android-installed PC, but still could not practically root the phone.
Machek did find some problems with the Android OS, which runs on ARM processors, but is still looking for attack vulnerabilities. His mailing list posting describes some weak entry points related to the dynamic linker and a few integer and buffer overflows, but he invites feedback from others on Android security issues, preferably via private email.
Issue 245/2021
Buy this issue as a PDF
News
-
GNOME 40 Beta has been Released
Anyone looking to test the beta for the upcoming GNOME 40 release can now do so.
-
OpenMandriva Lx 4.2 has Arrived
The latest stable version of OpenMandriva has been released and offers the newest KDE desktop and ARM support.
-
Thunderbird 78 is being ported to Ubuntu 20.04
The Ubuntu developers have made the decision to port the latest release of Thunderbird to the LTS version of the platform.
-
Elementary OS is Bringing Multi-Touch Gestures to the OS
User-friendly Linux distribution, elementary OS, is working to make using the fan-favorite platform even better for laptops.
-
Decade-Old Sudo Flaw Discovered
A vulnerability has been discovered in the Linux sudo command that’s been hiding in plain sight.
-
Another New Linux Laptop has Arrived
Slimbook has released a monster of a Linux gaming laptop.
-
Mozilla VPN Now Available for Linux
The promised subscription-based VPN service from Mozilla is now available for the Linux platform.
-
Wayland and New App Menu Coming to KDE
The 2021 roadmap for the KDE desktop environment includes some exciting features and improvements.
-
Deepin 20.1 has Arrived
Debian-based Deepin 20.1 has been released with some interesting new features.
-
CloudLinux Commits Over 1 Million Dollars to CentOS Replacement
An open source, drop-in replacement for CentOS is on its way.